prestashop-update-check
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local CLI commands using the pattern
[module_path]/bin/console. It invokesupdate:check-new-versionandupdate:check-requirements. These commands are run at a path provided by the user, which is necessary for its core functionality. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from multiple external and local sources, creating a potential attack surface.
- Ingestion points: Processes output from local console commands, reads local log files at
[admin_path]/autoupgrade/logs/, and fetches raw file content and discussion data from external GitHub URLs. - Boundary markers: No specific delimiters or instructions are used to ignore embedded commands within the ingested data.
- Capability inventory: The agent can execute shell commands via the PrestaShop console and read local files.
- Sanitization: No sanitization or validation of the ingested external content is specified before analysis.
- [EXTERNAL_DOWNLOADS]: The skill fetches source code files and configuration data from PrestaShop's official GitHub organization for the purpose of diffing and compatibility checking. This includes resources from
github.com/PrestaShop/andraw.githubusercontent.com/PrestaShop/.
Audit Metadata