database-schema-designer

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:17 PM UTC
• Version:
  1.0.0

Overview

This is a documentation-only database design helper; its examples should be reviewed before use, especially the sample seed password.

Installation is reasonable for a schema-design helper. Review any generated migrations, RLS policies, indexes, and seed data before applying them to a real database, test changes in staging, keep backups, and do not reuse the example admin password outside disposable local development.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The seed-data example hardcodes a concrete password value (`password123`) and does so in a realistic user-creation flow without any warning that it is for local development only. This is dangerous because users frequently copy seed scripts into staging or production-like environments, which can leave predictable credentials in deployed systems or normalize insecure password practices.

VirusTotal

66/66 vendors flagged this skill as clean.