maintainx-upgrade-migration

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_CONTEXT_INJECTION
Full Analysis
  • [DYNAMIC_CONTEXT_INJECTION]: The SKILL.md file utilizes the dynamic context injection pattern !npm list 2>/dev/null | head -20 to display current project dependencies when the skill is loaded. The command is benign and provides relevant environment information for the migration task.
  • [INDIRECT_PROMPT_INJECTION]: The skill contains scripts designed to process external, potentially untrusted data from the local environment, creating a vulnerability surface.
  • Ingestion points: The skill reads from the ./src directory in scripts/audit-api-usage.ts and parses ./logs/api-requests.json in references/implementation-guide.md.
  • Boundary markers: There are no explicit delimiters or instructions provided to the agent to disregard potential instructions embedded within the files being scanned.
  • Capability inventory: The skill is granted Write, Edit, and Bash capabilities, which could be leveraged if malicious instructions were successfully injected through the processed data.
  • Sanitization: The implementation lacks sanitization or validation of the content ingested from source files or logs before it is processed or reported to the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:48 AM
Security Audit — agent-trust-hub — maintainx-upgrade-migration