odoo-upgrade-executer

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill generates Python migration scripts (e.g., pre-migrate.py) based on templates for Odoo database upgrades. These scripts are designed to be executed by the Odoo server during the module upgrade process to handle data renames and schema changes.
  • [EXTERNAL_DOWNLOADS]: The skill references and downloads content from well-known repositories including odoo/odoo, odoo/enterprise, and OCA/OpenUpgrade on GitHub to verify code against target versions. It also instructs the user to install the openupgradelib package from a public registry.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data which could contain malicious instructions.
  • Ingestion points: The skill reads instructions and code from tasks/00-INDEX.md and tasks/NN-<module>.md files generated during the planning phase.
  • Boundary markers: There are no delimiters or "ignore embedded instructions" warnings used when processing the task files.
  • Capability inventory: The skill has the capability to modify module files, write new Python migration scripts, and execute shell commands (git, gh, grep).
  • Sanitization: Instructions within the task files are implemented exactly as written without additional validation or filtering.
  • [COMMAND_EXECUTION]: The skill utilizes shell commands like git clone and the GitHub CLI (gh auth status, gh repo view, gh api) to retrieve source code, compare branches, and verify repository access permissions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 07:11 AM
Security Audit — agent-trust-hub — odoo-upgrade-executer