metabase-modular-embedding-version-upgrade
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation and changelogs from official Metabase domains (
www.metabase.com) and GitHub repositories (metabase/metabase). These resources are used to identify breaking changes and API updates. - [COMMAND_EXECUTION]: The skill executes local bash scripts (
prepare.sh,read-sources.sh) to handle package management tasks. Specifically, it usesnpm packto download specific versions of the@metabase/embedding-sdk-reactpackage for inspection. The scripts use variables for version numbers which are interpolated into shell commands; while these are sourced from project files, they represent a standard operational pattern for version upgrade tools. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from project configuration files and external documentation.
- Ingestion points:
package.jsonversion fields, documentation content from Metabase official site, and changelog files. - Boundary markers: The skill does not implement explicit boundary markers or instructions to ignore potential commands within the documentation content.
- Capability inventory: The agent possesses
Write,Edit, andBashcapabilities across its scripts. - Sanitization: No explicit sanitization or filtering is performed on the ingested documentation or configuration data.
Audit Metadata