odoo-upgrade-advisor
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the Odoo Community Association (OCA) OpenUpgrade repository on GitHub for migration scripts. This is a well-known community organization.
- [COMMAND_EXECUTION]: Provides shell command examples for cloning scripts and running the Odoo server in migration mode. These are standard administrative procedures for the intended use case.
- [INDIRECT_PROMPT_INJECTION]: The skill has the following attack surface: 1. Ingestion points: current and target version strings provided by the user (SKILL.md); 2. Boundary markers: absent; 3. Capability inventory: shell command execution via git and python (SKILL.md); 4. Sanitization: absent. The risk is assessed as safe given the static instructional nature of the response.
- [SAFE]: The skill explicitly advises users to redact secrets before uploading databases to external services and to perform upgrades on staging clones rather than production environments.
Audit Metadata