typo3-project-upgrade
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands for environment management (composer), infrastructure maintenance (rm, ls), and database operations (DELETE, TRUNCATE). These actions are restricted to relevant project directories and database tables necessary for the migration workflow.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external project data and database records, creating a standard surface for indirect injection. Given its purpose as a migration tool requiring write access to the database and filesystem, this surface is expected and managed through clear instructional context.
- [EXTERNAL_DOWNLOADS]: Project dependencies are managed via Composer using official core packages. Documentation and reference playbooks are sourced from the vendor's verified GitHub Pages repository (netresearch.github.io).
Audit Metadata