database-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/detect-model-changes.pyexecutes local CLI commands to analyze project metadata and identify schema changes. - Evidence: Uses
subprocess.runwith list-based arguments to callgit diff,git ls-files, andalembic current. - [DYNAMIC_CONTEXT_INJECTION]: The
scripts/create-migration.mdfile uses dynamic execution placeholders to automatically populate migration files with project context. - Evidence: Employs the
!syntax to runalembic current,git diff, and systemdatecommands at skill load time to provide environment-aware templates. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect injection as it parses local source code and incorporates user-provided arguments into migration templates.
- Ingestion points: The skill reads local Python files via
scripts/detect-model-changes.py. - Boundary markers: Absent; the skill lacks specific delimiters to isolate potentially malicious patterns in the ingested code.
- Capability inventory: The skill can execute shell commands via
subprocessand dynamic context tags. - Sanitization: Absent; no specific escaping or validation is performed on the parsed code contents.
- [EXTERNAL_DOWNLOADS]: The documentation recommends the installation of third-party database management tools from a well-known service.
- Evidence:
rules/migration-rollback.mdsuggests installing thepgrolltool via Homebrew (brew install xataio/pgroll/pgroll).
Audit Metadata