groq-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the dynamic context injection syntax in SKILL.md to execute npm and pip status checks at load time. These commands are used to provide the agent with immediate visibility into the environment's SDK status and are benign in this context.
- [INDIRECT_PROMPT_INJECTION]: The skill performs search and edit operations on source code to identify and replace deprecated model strings. This ingestion of codebase content creates an indirect prompt injection surface inherent to the skill's purpose. (1) Ingestion points: The skill uses grep to scan files in the project's source directory (documented in references/implementation.md). (2) Boundary markers: absent. (3) Capability inventory: utilizes Bash, Write, and Edit tools (defined in SKILL.md) to modify project files. (4) Sanitization: no explicit validation of the ingested source code content is performed.
- [DYNAMIC_EXECUTION]: The implementation guide includes an integration test that executes a static Node.js script template via node -e to verify API connectivity.
- [EXTERNAL_DOWNLOADS]: The skill facilitates downloading the official groq-sdk package from the npm registry and fetches current model lists from the official Groq API endpoint. These external references target legitimate, well-known service infrastructure.
- [COMMAND_EXECUTION]: The skill relies on shell commands for dependency management, version control, and code analysis. These capabilities are used appropriately for a migration workflow.
Audit Metadata