render-migrate-from-heroku
Fail
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to install the Render CLI by downloading and executing a shell script from a remote source (
https://raw.githubusercontent.com/render-oss/cli/main/bin/install.sh) piped directly to the shell (sh). This script originates from the official GitHub organization of a well-known service provider. - [COMMAND_EXECUTION]: The skill directs the agent to execute several shell commands, including
render blueprints validatefor configuration testing,git remotefor repository discovery, and PostgreSQL tools (pg_dump,pg_restore) for data migration. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it reads and interprets the content of untrusted local project files to generate service configurations and start commands.
- Ingestion points: Local project files such as
Procfile,package.json,requirements.txt, andapp.json(SKILL.md). - Boundary markers: Absent; there are no instructions to the agent to delimit or ignore instructions embedded within the processed data.
- Capability inventory: Shell command execution (
git,render,pg_dump) and file writing (SKILL.md,references/data-migration.md). - Sanitization: Absent; the agent extracts values directly from file contents to populate the
render.yamlblueprint.
Recommendations
- HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/render-oss/cli/main/bin/install.sh - DO NOT USE without thorough review
Audit Metadata