odoo-migration
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands to manage the module migration workflow.
- Executes Git operations including
clone,checkout,format-patch,am, andcommitto handle version porting and patch application. - Runs
pre-commit run -ato enforce repository-specific formatting standards. - Adapts and proposes execution of Odoo installation and testing commands derived from user-defined environment variables such as
$ODOO_BASE_COMMANDand local wrap-around tools described in$ODOO_TOOL_README. - [EXTERNAL_DOWNLOADS]: Fetches module source code from the Odoo Community Association (OCA) official GitHub organization.
- Uses
git cloneto pull repositories fromgithub.com/OCA/for migration purposes. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external repositories which constitutes a potential injection surface.
- Ingestion points: Ingests Odoo module files, including Python code, XML views, manifests, and documentation, from cloned repositories in
OCA-MODULE-MIGRATION.md. - Boundary markers: The skill does not define specific markers or delimiters to isolate content from these external files during processing.
- Capability inventory: The agent can execute Git commands, run local formatting tools, and propose Odoo-specific shell commands.
- Sanitization: No explicit sanitization or validation of the ingested code content is performed within the instructions.
Audit Metadata