upgrade-mule-app
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute several commands including anypoint-cli-v4, mvn, and xmllint. These are used for project analysis, metadata retrieval, and verifying the integrity of the updated application.
- [EXTERNAL_DOWNLOADS]: The skill fetches Mule Runtime and JDK distributions from official vendor channels via the Anypoint CLI. It also downloads plugin version metadata from the official MuleSoft release repository and installs the fast-xml-parser package from the standard npm registry. These activities are essential for the skill's primary functionality and target well-known, trusted sources.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local project files like pom.xml and Mule flow XMLs to drive its upgrade logic. Potential risks from processing untrusted project code are mitigated through the use of structured JSON for internal data transfer and specific instructions to the agent to preserve existing business logic and avoid processing commented sections.
Audit Metadata