fineui-upgrade
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from local project files, including source code, configuration files (
web.config,csproj), and package manifests. It then uses this data to generate a migration plan and modify project code. There are no defined boundary markers or sanitization steps to prevent instructions hidden within these project files from influencing the agent's behavior during the upgrade process. - Ingestion points:
FineUI.js,web.config,csproj, and various project source files. - Boundary markers: None specified.
- Capability inventory: File reading, file writing (
FINEUI_UPGRADE_PLAN.md), and modification of existing source code. - Sanitization: None specified.
- [EXTERNAL_DOWNLOADS]: The skill references version history and API documentation from
fineui.com. These are official vendor resources for the FineUI product and are used for informational purposes.
Audit Metadata