OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass4 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
This skill generates database migrations for Medusa modules using the Medusa CLI. It is susceptible to command injection because user-provided module names are interpolated directly into a shell command without validation.
Detected behaviors
No alerts
No issues
1 file scanned · No issues