odoo-upgrade-executer
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill generates Python migration scripts (e.g.,
pre-migrate.py) based on templates for Odoo database upgrades. These scripts are designed to be executed by the Odoo server during the module upgrade process to handle data renames and schema changes. - [EXTERNAL_DOWNLOADS]: The skill references and downloads content from well-known repositories including
odoo/odoo,odoo/enterprise, andOCA/OpenUpgradeon GitHub to verify code against target versions. It also instructs the user to install theopenupgradelibpackage from a public registry. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data which could contain malicious instructions.
- Ingestion points: The skill reads instructions and code from
tasks/00-INDEX.mdandtasks/NN-<module>.mdfiles generated during the planning phase. - Boundary markers: There are no delimiters or "ignore embedded instructions" warnings used when processing the task files.
- Capability inventory: The skill has the capability to modify module files, write new Python migration scripts, and execute shell commands (
git,gh,grep). - Sanitization: Instructions within the task files are implemented exactly as written without additional validation or filtering.
- [COMMAND_EXECUTION]: The skill utilizes shell commands like
git cloneand the GitHub CLI (gh auth status,gh repo view,gh api) to retrieve source code, compare branches, and verify repository access permissions.
Audit Metadata