principle-migrate-callers-then-delete-legacy-apis
Warn
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: MEDIUMPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill includes a 'Uni-pstack Runtime Adapter' section that explicitly instructs the agent to override its default behaviors. It commands the agent to ignore standard model selections (e.g., Claude Opus) and use unauthorized alternatives like 'Codex gpt-5.6-sol'.
- [COMMAND_EXECUTION]: The instructions direct the agent to launch external processes and workers using scripts like 'spawn-codex-worker' or 'codex exec'. This promotes the execution of commands on the host system that are outside the scope of the skill's stated purpose of providing API migration guidelines.
Audit Metadata