klingai-upgrade-migration

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The reference script references/upgrade-procedure.md includes functionality in the UpgradeProcedure class that uses subprocess.run to call pip install. This is intended to facilitate the migration and upgrade of SDK dependencies.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes migration-related configuration and model data, which creates a surface for indirect prompt injection.
  • Ingestion points: Untrusted data enters the context through model documentation parsing and configuration file reading in SKILL.md and references/migration-scripts.md.
  • Boundary markers: The instructions utilize clear markdown headers and code blocks to separate tasks, though they lack explicit directives to ignore instructions that might be embedded in processed data.
  • Capability inventory: The skill possesses capabilities for network operations (requests to Kling AI API), file system modification (json.dump and shutil.copy2), and command execution (pip via subprocess).
  • Sanitization: The scripts employ standard libraries like ast and re to scan source code for patterns and json for configuration parsing, providing structural validation of the data being processed.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:45 AM
Security Audit — agent-trust-hub — klingai-upgrade-migration