skills/sickn33/agentic-awesome-skills/database-migrations-migration-observability/Gen Agent Trust Hub
database-migrations-migration-observability
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection through its ingestion of untrusted external data.
- Ingestion points: Data is consumed from Kafka topics (e.g.,
database.changes) and MongoDB collections during migration monitoring. - Boundary markers: The instructions and scripts do not implement delimiters or specific warnings to ignore embedded instructions within the processed data streams.
- Capability inventory: The skill possesses network capabilities via the
requestslibrary to send data to Slack, Grafana, and Kafka Connect, and file system write access for logging. - Sanitization: There is no evidence of sanitization, validation, or filtering of the content retrieved from external sources before it is interpolated into alerts or log files.
- [EXTERNAL_DOWNLOADS]: The skill utilizes several well-known and standard third-party libraries.
- Node.js packages: Includes
mongodb,winston, andprom-clientfor database connectivity and observability. - Python packages: Uses
kafka-python,prometheus_client,requests, andnumpyfor data processing and telemetry. - GitHub Actions: Provides an example workflow utilizing the trusted
actions/checkout@v4action.
Audit Metadata