framework-migration-deps-upgrade
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes code templates that use
subprocess.runto execute package management tools such asnpmandpipto audit project dependencies. Found inresources/implementation-playbook.mdat lines 52 and 73. - [PROMPT_INJECTION]: The skill processes untrusted external data including package names, versions, and changelogs which could contain malicious instructions designed to influence agent behavior during report generation.
- Ingestion points: Dependency data from
npmandpipcommand outputs inresources/implementation-playbook.md. - Boundary markers: Absent from the generated markdown reports.
- Capability inventory: Subprocess execution and file system access as demonstrated in the playbook examples.
- Sanitization: Data is parsed via JSON but interpolated directly into output strings without escaping or validation.
Audit Metadata