upgrade-breaking-change-navigator
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external data sources such as project configuration files (Gradle wrapper, version catalogs, convention plugins), build logs, and official upgrade notes.
- Ingestion points: Analyzes build configuration files and external documentation referenced in SKILL.md.
- Boundary markers: The skill does not explicitly define delimiters or instructions to ignore embedded prompts within the analyzed project files.
- Capability inventory: The skill's primary function is analysis and planning. It generates a structured upgrade path and identifies hotspots but does not include instructions for arbitrary command execution or network exfiltration.
- Sanitization: There are no explicit sanitization steps mentioned for the ingested version data or documentation content.
Audit Metadata