modernize-uplift
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes and executes external source code, creating an attack surface for indirect prompt injection.\n
- Ingestion points: Reads code from
legacy/$systemand test configurations.\n - Boundary markers: Includes explicit instructions to treat instruction-shaped text in source as data and not to follow it.\n
- Capability inventory: Can execute shell commands (
run_command), write files (write_to_file,rsync), and spawn sub-agents.\n - Sanitization: Relies on human approval gates and automated "architecture-critic" reviews to detect unexpected changes.\n- [COMMAND_EXECUTION]: The skill performs extensive shell command execution for building, testing, and version control.\n
- Evidence: Uses
dotnet,mvn,gradle,pytest,rsync, andgitcommands.\n- [DYNAMIC_EXECUTION]: Executes logic via dynamic script loading and sub-agent orchestration.\n - Evidence: Invokes scripts located in
${ANTIGRAVITY_PLUGIN_ROOT}and spawns specialized agents likeversion-delta-analystanduplift-migrator.
Audit Metadata