openpress-upgrade
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the local framework CLI (
node_modules/@open-press/core/engine/cli.mjs) to perform workspace diagnostics, dependency upgrades, and settings migrations. - [COMMAND_EXECUTION]: Utilizes
ripgrep(rg) and project build scripts (npm run build) to scan source code and verify migration success. - [INDIRECT_PROMPT_INJECTION]: The skill processes migration documentation (
docs/migrations/<version>.md) to identify necessary workspace changes and QA checkpoints. - Ingestion points: Migration documentation files found within the OpenPress repository.
- Boundary markers: The workflow mandates a "Confirm Before Mutation" step where the agent must present a summary and wait for user approval before executing edits.
- Capability inventory: Includes file system write access, local binary execution, and workspace scanning.
- Sanitization: Relies on human-in-the-loop verification of the migration plan and dry-run outputs to prevent the execution of unexpected instructions embedded in documentation.
Audit Metadata