appfolio-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external AppFolio API endpoints to perform version detection and schema migration.
- Ingestion points: Data is retrieved from a user-specified
baseUrlvia thedetectApiVersionandversionAwareRequestfunctions in theSKILL.mdfile. - Boundary markers: The skill does not implement delimiters or explicit instructions to ignore potentially malicious content embedded within the API responses.
- Capability inventory: The skill has access to
Read,Write,Edit, andBashtools, which could be leveraged if the agent follows instructions injected via a compromised API response. - Sanitization: The skill parses API responses as JSON but does not sanitize or validate the content of fields such as
api_versionorlatest_versionbefore using them in logic.
Audit Metadata