Database Migration Manager

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:36 PM UTC
• Version:
  1.0.1

Overview

This is a disclosed database migration helper, but it can affect real databases so users should review commands carefully before running them.

Install this only if you want agent assistance with database migrations. Before allowing any command, verify the target environment and database URL, review generated SQL or migration files, confirm a fresh backup exists for production, and be especially careful with rollback, DROP, DELETE, push, reset, and restore commands.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The activation phrases are broad enough to match common user language like 'migrate' or 'rollback' outside a clearly database-specific context, which can cause unintended invocation of a skill capable of destructive operations. In this skill, accidental activation is more concerning because the instructions include schema changes, rollbacks, backups, and environment inspection, increasing the chance of unnecessary access to project files or harmful command suggestions.

VirusTotal

65/65 vendors flagged this skill as clean.