Back to skill

Security audit

Ecto Migrator

Security checks for vulnerabilities and agentic risk

Overview

This skill provides Ecto migration guidance and examples; the database-impacting behavior is expected for its purpose and is not hidden or automatically executed.

Before installing, treat generated migrations as draft code: review destructive operations such as column drops, table drops, renames, and cascading deletes; confirm backups and rollback plans before applying them to production.

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

The skill includes destructive migration examples such as removing columns and renaming schema elements without explicitly warning the user that some operations can cause irreversible data loss or break application/runtime expectations. In a migration-generation skill, omission of those warnings is risky because users may copy generated migrations directly into production workflows.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The section notes that dropping columns with data is irreversible, but it does not provide a strong user-facing warning that executing such migrations can permanently destroy production data and may require staged rollout planning. Because this skill is designed to generate operational database migrations, understated guidance can lead to unsafe code being produced and applied with real impact.

Content

No source excerpt is available for this finding.

Behavior Manipulation

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Subtle instructions detected that may alter agent decision-making or introduce hidden biases.

Content

Scanner excerpt · references/index-patterns.md (reported line 43)May include surrounding context.

Unique Index

Enforces uniqueness at the database level. Always prefer over application-level checks.

elixir
# Single column

Static analysis

No suspicious patterns detected.