convex-migrations

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends the installation and use of the @convex-dev/migrations package. This is a standard library provided for the well-known Convex backend platform to manage schema transitions safely.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to handle and transform database records. It incorporates security best practices by instructing the agent to use internalMutation to prevent unauthorized access to migration functions and utilizing Convex's schema validators to enforce data integrity.
  • [SAFE]: The provided code snippets include a helper function to generate default avatars using api.dicebear.com. This is a well-known service for generating placeholder images and is used here in a standard, non-malicious context.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 11:55 AM