maintainx-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_CONTEXT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The
SKILL.mdfile utilizes the dynamic context injection pattern!npm list 2>/dev/null | head -20to display current project dependencies when the skill is loaded. The command is benign and provides relevant environment information for the migration task. - [INDIRECT_PROMPT_INJECTION]: The skill contains scripts designed to process external, potentially untrusted data from the local environment, creating a vulnerability surface.
- Ingestion points: The skill reads from the
./srcdirectory inscripts/audit-api-usage.tsand parses./logs/api-requests.jsoninreferences/implementation-guide.md. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to disregard potential instructions embedded within the files being scanned.
- Capability inventory: The skill is granted
Write,Edit, andBashcapabilities, which could be leveraged if malicious instructions were successfully injected through the processed data. - Sanitization: The implementation lacks sanitization or validation of the content ingested from source files or logs before it is processed or reported to the agent.
Audit Metadata