d1-05-entity-migration
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it interpolates user-provided entity names and column definitions directly into C# code and shell commands.
- Ingestion points: The entity name and column list are requested from the user and used to generate the
<Entity>.csfile and the migration name. - Boundary markers: None. The instructions do not specify any delimiters or warnings to ignore instructions embedded within the user-provided data.
- Capability inventory: The skill possesses file writing capabilities (
sic-api/Entities/), global tool installation (dotnet tool install), and database modification capabilities (dotnet ef database update). - Sanitization: Absent. While the instructions suggest PascalCase for names, there is no requirement to sanitize or validate the input to prevent command injection characters (e.g., semicolons or backticks) from being passed to the shell.
- [COMMAND_EXECUTION]: The skill executes several shell commands to manage the development environment and database.
- Evidence: Uses
dotnet tool install --global dotnet-efto install the Entity Framework Core CLI tool anddotnet ef migrations addto generate new migrations based on user input.
Audit Metadata