render-migrate-from-heroku
Fail
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute the Render CLI installation script from the official 'render-oss' GitHub repository using a piped-to-shell command (curl | sh).
- [INDIRECT_PROMPT_INJECTION]: The skill functions by ingesting and parsing various local project files (e.g., Procfile, package.json, app.json) to automate configuration. This creates a surface for indirect prompt injection if an attacker-controlled repository contains malicious instructions within these files.
- Ingestion points: Local repository files including Procfile, package.json, requirements.txt, Gemfile, go.mod, Cargo.toml, and others in SKILL.md.
- Boundary markers: No specific delimiters or safety instructions are used to isolate content read from these files from the agent's logic.
- Capability inventory: The skill possesses significant capabilities, including executing the render CLI, git commands, and database migration tools like pg_dump and redis-cli.
- Sanitization: There is no documented evidence of sanitization or validation of the data extracted from the project files before it is used to generate configuration or drive tool execution.
- [COMMAND_EXECUTION]: The skill makes extensive use of local shell commands to facilitate migration, including repository management via git, service management via the render CLI, and database backup/restore operations via pg_dump, pg_restore, and redis-cli.
- [EXTERNAL_DOWNLOADS]: The skill fetches current documentation, configuration schemas, and installation scripts from official Render domains (render.com, mcp.render.com) and GitHub repositories (github.com/render-oss).
Recommendations
- HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/render-oss/cli/main/bin/install.sh - DO NOT USE without thorough review
Audit Metadata