kirby-content-migration
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted content from a Kirby installation to plan and execute migrations.
- Ingestion points: Data is retrieved via
kirby:kirby_read_page_contentand directory analysis in the content folder. - Boundary markers: The workflow enforces a confirm-first policy, utilizing
confirm=falsefor previews and requiring explicit user authorization before execution. - Capability inventory: The skill possesses file-writing capabilities through
kirby:kirby_update_page_contentand environment setup functionality viakirby:kirby_runtime_install. - Sanitization: Instructions include validating payloads against blueprints/schemas and auditing Symfony YAML scalars to prevent formatting-based injection.
Audit Metadata