appfolio-upgrade-migration

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external AppFolio API endpoints to perform version detection and schema migration.
  • Ingestion points: Data is retrieved from a user-specified baseUrl via the detectApiVersion and versionAwareRequest functions in the SKILL.md file.
  • Boundary markers: The skill does not implement delimiters or explicit instructions to ignore potentially malicious content embedded within the API responses.
  • Capability inventory: The skill has access to Read, Write, Edit, and Bash tools, which could be leveraged if the agent follows instructions injected via a compromised API response.
  • Sanitization: The skill parses API responses as JSON but does not sanitize or validate the content of fields such as api_version or latest_version before using them in logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:41 AM
Security Audit — agent-trust-hub — appfolio-upgrade-migration