migrate-oxygen-to-bricks
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes Oxygen Builder content from the WordPress database. Since this content is externally provided and untrusted, it creates a surface for indirect prompt injection where malicious instructions could be embedded to influence the agent's migration behavior.
- [EXTERNAL_DOWNLOADS]: The skill sends fire-and-forget telemetry data, including usage statistics and site context, to the vendor's endpoint at
https://www.respira.press/api/skills/track-usage. As this is a verified vendor resource, it is considered safe and does not escalate the security verdict.
Audit Metadata