upgrade-mule-app

Pass

Audited by Gen Agent Trust Hub on Aug 31, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads official toolchains and dependencies required for Mule application development and maintenance.
  • Fetches @mulesoft/anypoint-cli-v4 and @salesforce/anypoint-cli-dx-mule-plugin from the official NPM registry.
  • Downloads Java JDKs and Mule Runtime distributions using the vendor's official CLI tool.
  • Ephemerally installs the fast-xml-parser package from the NPM registry to facilitate XML processing.
  • Retrieves Maven metadata from the official MuleSoft repository (repository.mulesoft.org) to identify the latest plugin versions.
  • [COMMAND_EXECUTION]: The skill executes system commands and build tools to manage the application lifecycle.
  • Invokes mvn clean package and mvn test to ensure project integrity and runtime correctness.
  • Uses the anypoint-cli-v4 utility for environment setup, configuration, and asset inspection.
  • Executes a suite of bundled Node.js scripts that handle version detection, XML parsing, and deterministic project file updates.
  • [INDIRECT_PROMPT_INJECTION]: The skill operates on application source code and configuration files which are external to the skill itself.
  • Ingestion points: Processes pom.xml, mule-artifact.json, flow XML files, and DataWeave scripts (documented in scripts/extract_connectors.mjs and scripts/enumerate_usage.mjs).
  • Boundary markers: The skill does not use specific delimiters but treats files as structured data or text for modification.
  • Capability inventory: Accesses file-system tools (Read, Write, Edit) and shell execution (Bash) to perform upgrades.
  • Sanitization: Employs dedicated scripts for version handling and targeted regex or DOM-based parsing for code edits, which limits the risk of external content being interpreted as instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 31, 2026, 07:28 PM
Security Audit — agent-trust-hub — upgrade-mule-app