gemfile-upgrade

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands via the Bash tool to manage Ruby dependencies using bundle and version control using git. It also automatically detects and runs project tests using rspec or rails test to verify the safety of upgrades.
  • [EXTERNAL_DOWNLOADS]: The skill fetches data from external sources, specifically repository changelogs and release notes on GitHub. This information is processed to inform the user about potential breaking changes and version jumps.
  • [PROMPT_INJECTION]: The skill processes untrusted data from external websites which presents a surface for indirect prompt injection.
  • Ingestion points: External changelog and release files are retrieved via the WebFetch tool from GitHub URLs.
  • Boundary markers: The skill formats the retrieved data into a structured 'Upgrade Analysis' block, providing some separation between external content and instructions.
  • Capability inventory: The skill has access to the Bash tool (allowing shell command execution), the Edit tool (allowing file modifications), and the WebFetch tool.
  • Sanitization: The skill extracts specific keywords (e.g., 'BREAKING', 'removed') to categorize changes but does not demonstrate explicit sanitization or escaping of the full changelog text before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 08:54 PM
Security Audit — agent-trust-hub — gemfile-upgrade