granola-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard macOS system tools such as
brewfor package management,defaultsfor reading and modifying application preferences, andrmfor clearing application caches. These operations are scoped to the management of the Granola application. - [EXTERNAL_DOWNLOADS]: The skill references downloads for application installers and updates from the official
granola.aidomain and the Homebrew package registry. These are legitimate sources for the application described in the skill. - [INDIRECT_PROMPT_INJECTION]: The skill ingests local metadata by reading the version string from the application's
Info.plistfile. This represents an ingestion point for external (local system) data into the agent's context, but is limited to system-controlled application files.
Audit Metadata