speak-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the dynamic context injection pattern (
!npm list...) inSKILL.mdto execute a shell command when the skill is loaded. This is used to check for the presence of the@speak/language-sdkand provide immediate feedback on the environment state. - [INDIRECT_PROMPT_INJECTION]: The migration utility (
scripts/migrate-speak-v3.ts) recursively reads and writes files within the./srcdirectory. This creates an attack surface where untrusted data in source code could interact with the migration logic, though the script uses specific regex patterns which limits exploitation potential. - [DYNAMIC_EXECUTION]: The skill uses
node -eto verify the SDK version after an upgrade and includes a migration script that programmatically rewrites source files. While these involve dynamic operations, they are standard implementations for software migration tools.
Audit Metadata