oraclecloud-upgrade-migration
Warn
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill accesses
~/.oci/configto initialize OCI SDK clients and authenticate against Oracle Cloud APIs. This file contains highly sensitive information, including user and tenancy identifiers and private authentication keys. - [EXTERNAL_DOWNLOADS]: Instructions specify upgrading packages
oci,oci-cli, andcertifivia the Python package manager. It also facilitates provider upgrades throughterraform init, which downloads binary providers from the official Terraform Registry. - [COMMAND_EXECUTION]: The workflow relies heavily on executing shell commands such as
pip,oci,terraform, andgit. It includes bash scripts for scanning infrastructure code for deprecated resources and performing automated validation tests. - [DYNAMIC_EXECUTION]: Employs
python3 -cto execute Python validation scripts and formatting logic directly from the command line, specifically for checking SDK status and parsing JSON metadata. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from environment logs and package metadata, which could potentially be manipulated by external inputs.
- Ingestion points: Reads and parses
upgrade-plan.log,.terraform.lock.hcl, andrequirements-oci-backup.txt. - Boundary markers: None; the skill does not use specific markers to delimit untrusted log data from agent instructions.
- Capability inventory: The agent is granted capabilities to perform package installations, infrastructure changes via Terraform, and Git branch management.
- Sanitization: None; the skill uses
grepto filter for specific strings in log files without sanitizing the data to prevent potential instruction injection.
Audit Metadata