convex-migrations
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends the installation and use of the
@convex-dev/migrationspackage. This is a standard library provided for the well-known Convex backend platform to manage schema transitions safely. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to handle and transform database records. It incorporates security best practices by instructing the agent to use
internalMutationto prevent unauthorized access to migration functions and utilizing Convex's schema validators to enforce data integrity. - [SAFE]: The provided code snippets include a helper function to generate default avatars using
api.dicebear.com. This is a well-known service for generating placeholder images and is used here in a standard, non-malicious context.
Audit Metadata