metabase-full-app-to-modular-embedding-upgrade
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches version-specific documentation from the official Metabase website (
www.metabase.com). This is used to ensure that the web component attributes and configuration options match the user's specific Metabase version. As this is a vendor-owned domain, the download is considered safe functionality. - [COMMAND_EXECUTION]: Utilizes local tools including
Grep,Glob, andBashto analyze the project's source code andEditto apply the migration changes. These operations are essential for the skill's primary purpose and are implemented with specific, non-malicious patterns. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from a remote text file (
llms-embedding-full.txt) to inform its migration logic. While this constitutes an external data ingestion surface, the source is the official documentation of the skill's authoring vendor. - Ingestion points:
WebFetchtool call tometabase.comin Step 1a. - Boundary markers: No specific delimiters or boundary warnings are applied to the fetched text.
- Capability inventory:
Read,Write,Edit,Glob,Grep,Bash,WebFetch, and Task management tools. - Sanitization: No sanitization is performed on the fetched documentation content, as it is treated as a trusted configuration source from the vendor.
Audit Metadata