odoo-migration

Pass

Audited by Gen Agent Trust Hub on May 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to clone repositories from the Odoo Community Association (OCA) GitHub organization.
  • [COMMAND_EXECUTION]: The workflow involves running git commands such as clone, checkout, format-patch, and am to manage module history and apply migration patches.
  • [COMMAND_EXECUTION]: The skill utilizes pre-commit run -a to apply standard code formatting and quality checks as part of the migration process.
  • [REMOTE_CODE_EXECUTION]: The execution of pre-commit hooks can involve downloading and running external scripts or binaries defined in the repository's .pre-commit-config.yaml file.
  • [PROMPT_INJECTION]: The skill processes external data by cloning repositories and applying patches, which presents an indirect prompt injection surface if the source material contains malicious instructions. However, the skill includes guardrails that require user confirmation before executing critical Odoo commands.
Audit Metadata
Risk Level
SAFE
Analyzed
May 18, 2026, 08:10 AM
Security Audit — agent-trust-hub — odoo-migration