appmigrationkit
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of data from external sources during app migration, which creates a potential surface for indirect prompt injection if the imported content contains malicious instructions designed to subvert agent logic.\n
- Ingestion points: Data is received via the
importResourcesfunction inreferences/appmigrationkit-patterns.md.\n - Boundary markers: The code includes
validateManifestand version checks (sourceVersion) to verify incoming data.\n - Capability inventory: The skill uses
FileManagerto perform file system operations (write/delete) within the application's sandbox and app groups.\n - Sanitization: Implementation patterns suggest manifest validation and structural remapping of imported files.\n- [EXTERNAL_DOWNLOADS]: The skill contains references to documentation and API specifications hosted on an external domain that is not recognized as a trusted or well-known service provider.\n
- Evidence:
SKILL.mdcontains several links tohttps://sosumi.ai/documentation/.
Audit Metadata