algolia-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches migration guidelines and documentation from Algolia's official website. Algolia is a well-known service provider, and this operation is intended to inform the migration process.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external documentation and local source files to perform automated code edits, creating a surface for potential indirect instructions.
- Ingestion points: Local repository files via Read, Glob, and Grep tools; official Algolia documentation via WebFetch.
- Boundary markers: The instructions do not define explicit delimiters or warnings to ignore instructions embedded in the ingested documentation.
- Capability inventory: The skill uses Write and Edit tools to modify the local codebase and WebFetch to access external URLs.
- Sanitization: No explicit validation or escaping of external content is defined in the instructions before it is used to determine code changes.
Audit Metadata