finfocus-plugin-upgrade
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: Analysis of the instructions and reference guides shows the skill is designed for legitimate software maintenance. It utilizes local command-line tools (go, git, grep, and the finfocus CLI) to perform updates, builds, and tests within the user's project directory.
- [INDIRECT_PROMPT_INJECTION]: The skill has an inherent surface for indirect prompt injection as it processes untrusted code from the plugin project being upgraded.
- Ingestion points: The skill reads the plugin's repository root, specifically
go.modand all.gosource files. - Boundary markers: The skill relies on structured JSON output from its own tools for planning, but lacks explicit prompt delimiters for the project code it processes.
- Capability inventory: The skill has the ability to write to the file system, manage git branches, and execute code through
go buildandgo testsuites. - Sanitization: No specific sanitization or filtering is applied to the ingested project data. This surface is expected and necessary for a code-refactoring and upgrade skill.
Audit Metadata