odoo-migration

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes shell commands to manage the module migration workflow.
  • Executes Git operations including clone, checkout, format-patch, am, and commit to handle version porting and patch application.
  • Runs pre-commit run -a to enforce repository-specific formatting standards.
  • Adapts and proposes execution of Odoo installation and testing commands derived from user-defined environment variables such as $ODOO_BASE_COMMAND and local wrap-around tools described in $ODOO_TOOL_README.
  • [EXTERNAL_DOWNLOADS]: Fetches module source code from the Odoo Community Association (OCA) official GitHub organization.
  • Uses git clone to pull repositories from github.com/OCA/ for migration purposes.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external repositories which constitutes a potential injection surface.
  • Ingestion points: Ingests Odoo module files, including Python code, XML views, manifests, and documentation, from cloned repositories in OCA-MODULE-MIGRATION.md.
  • Boundary markers: The skill does not define specific markers or delimiters to isolate content from these external files during processing.
  • Capability inventory: The agent can execute Git commands, run local formatting tools, and propose Odoo-specific shell commands.
  • Sanitization: No explicit sanitization or validation of the ingested code content is performed within the instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 02:24 PM