intercom-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs environment checks and package management using
npmandgit. These are standard development operations and are restricted via the frontmatter to appropriate subcommands. - [INDIRECT_PROMPT_INJECTION]: The skill processes existing source code to identify and migrate SDK calls, which represents a surface for indirect prompt injection if the source files contain malicious instructions.
- Ingestion points: Project source files read during the migration process.
- Boundary markers: None explicitly mentioned in the skill instructions; relies on agent guardrails.
- Capability inventory: Access to
Write,Edit, andBash(npm/git) tools to modify code and interact with git. - Sanitization: The skill relies on manual developer review of the generated upgrade branch and integration testing results before merging.
Audit Metadata