granola-upgrade-migration

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard macOS system tools such as brew for package management, defaults for reading and modifying application preferences, and rm for clearing application caches. These operations are scoped to the management of the Granola application.
  • [EXTERNAL_DOWNLOADS]: The skill references downloads for application installers and updates from the official granola.ai domain and the Homebrew package registry. These are legitimate sources for the application described in the skill.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests local metadata by reading the version string from the application's Info.plist file. This represents an ingestion point for external (local system) data into the agent's context, but is limited to system-controlled application files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:46 AM