typo3-project-upgrade
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes instructions for standard TYPO3 maintenance and cleanup tasks, such as
rm -rf public/fileadmin/_processed_/*to clear processed image caches and SQL commands likeDELETE FROM sys_templateto remove legacy TypoScript records. These operations are explicitly scoped to Phase 2 and Phase 3 of the migration process. - [EXTERNAL_DOWNLOADS]: The skill guides the agent to upgrade core dependencies using
composer require typo3/cms-core:^14.3, which fetches packages from the official TYPO3 registry. - [EXTERNAL_DOWNLOADS]: The documentation references external resources from trusted domains including
docs.typo3.organd the official GitHub repositories of the original vendor. - [INDIRECT_PROMPT_INJECTION]: The skill provides auditing capabilities by reading project configuration files to ensure migration completeness.
- Ingestion points:
composer.json,config.yaml,settings.yaml, and TYPO3 database metadata. - Boundary markers: None present in the instructions.
- Capability inventory: File system access (
rm), database modification (DELETE,TRUNCATE), and package management (composer). - Sanitization: The skill relies on standard developer-controlled configuration files rather than untrusted external data.
Audit Metadata