odoo-migration
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to clone repositories from the Odoo Community Association (OCA) GitHub organization.
- [COMMAND_EXECUTION]: The workflow involves running
gitcommands such asclone,checkout,format-patch, andamto manage module history and apply migration patches. - [COMMAND_EXECUTION]: The skill utilizes
pre-commit run -ato apply standard code formatting and quality checks as part of the migration process. - [REMOTE_CODE_EXECUTION]: The execution of
pre-commithooks can involve downloading and running external scripts or binaries defined in the repository's.pre-commit-config.yamlfile. - [PROMPT_INJECTION]: The skill processes external data by cloning repositories and applying patches, which presents an indirect prompt injection surface if the source material contains malicious instructions. However, the skill includes guardrails that require user confirmation before executing critical Odoo commands.
Audit Metadata