skills/softspark/ai-toolkit/migrate/Gen Agent Trust Hub

migrate

Pass

Audited by Gen Agent Trust Hub on Jul 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill utilizes dynamic context injection in SKILL.md (the !command syntax) to run a directory listing command (ls) on load. This is used solely to detect the presence of migration configuration files (like alembic.ini or manage.py) and is a benign use of the feature for environment discovery.
  • [SAFE]: The included Python script (scripts/migration-status.py) performs read-only inspection of the file system using the standard pathlib library. It does not initiate network connections, access sensitive system files (like credentials or SSH keys), or execute arbitrary shell commands.
  • [SAFE]: The instructions in SKILL.md emphasize database safety, including mandatory requirements for backups, dry-runs, and human verification of SQL changes before execution in production environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 7, 2026, 12:05 AM
Security Audit — agent-trust-hub — migrate