clade-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard commands for upgrading official Anthropic SDKs (the 'anthropic' package for Python and '@claude-ai/sdk' for Node.js). These are well-known packages provided by the official vendor.
- [SAFE]: The skill uses the 'grep' tool to scan the local codebase for model ID strings (e.g., 'claude-'), which is a routine operation for identifying resources that need updating during a migration.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an ingestion surface by reading codebase files via 'grep' and performing 'Edit' operations based on findings. While this surface exists, the risk is inherent to the developer-centric task of codebase migration and no malicious patterns are present.
- Ingestion points: 'grep' command in SKILL.md reads files from the local directory.
- Boundary markers: Absent.
- Capability inventory: Read, Write, Edit, Bash, Grep.
- Sanitization: Absent.
Audit Metadata