upgrade-mule-app
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads official toolchains and dependencies required for Mule application development and maintenance.
- Fetches
@mulesoft/anypoint-cli-v4and@salesforce/anypoint-cli-dx-mule-pluginfrom the official NPM registry. - Downloads Java JDKs and Mule Runtime distributions using the vendor's official CLI tool.
- Ephemerally installs the
fast-xml-parserpackage from the NPM registry to facilitate XML processing. - Retrieves Maven metadata from the official MuleSoft repository (
repository.mulesoft.org) to identify the latest plugin versions. - [COMMAND_EXECUTION]: The skill executes system commands and build tools to manage the application lifecycle.
- Invokes
mvn clean packageandmvn testto ensure project integrity and runtime correctness. - Uses the
anypoint-cli-v4utility for environment setup, configuration, and asset inspection. - Executes a suite of bundled Node.js scripts that handle version detection, XML parsing, and deterministic project file updates.
- [INDIRECT_PROMPT_INJECTION]: The skill operates on application source code and configuration files which are external to the skill itself.
- Ingestion points: Processes
pom.xml,mule-artifact.json, flow XML files, and DataWeave scripts (documented inscripts/extract_connectors.mjsandscripts/enumerate_usage.mjs). - Boundary markers: The skill does not use specific delimiters but treats files as structured data or text for modification.
- Capability inventory: Accesses file-system tools (
Read,Write,Edit) and shell execution (Bash) to perform upgrades. - Sanitization: Employs dedicated scripts for version handling and targeted regex or DOM-based parsing for code edits, which limits the risk of external content being interpreted as instructions.
Audit Metadata