odoo-dev
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a senior Odoo developer persona designed to assist with building and optimizing Odoo applications. It provides a robust set of local reference files derived from official Odoo and OCA (Odoo Community Association) documentation to guide code generation and review.
- [COMMAND_EXECUTION]: The skill includes a local utility script (
scripts/scaffold.py) to automate the creation of Odoo modules. The instructions inSKILL.mdexplicitly mandate security best practices for the agent, such as requiring user confirmation, validating all inputs via regex (e.g., technical module names), and utilizing argument-array execution patterns to prevent shell metacharacter injection. - [EXTERNAL_DOWNLOADS]: The documentation references official repositories for the Odoo Community Association (OCA) and Odoo S.A. (e.g.,
github.com/odoo/upgrade-util). These are well-known, trusted organizations within the Odoo ecosystem, and the references are provided as standard technical guidance for developers. - [PROMPT_INJECTION]: A heuristic detection for 'unrestricted mode' in
assets/advanced_module/readme/CONFIGURE.mdwas determined to be a false positive. The flagged text refers to Odoo's 'developer mode,' which is a standard administrative configuration interface in the Odoo framework and does not constitute a jailbreak or safety bypass attempt.
Audit Metadata