Skills
skills/onekeyhq/app-monorepo/1k-app-upgrade-test/Gen Agent Trust Hub

1k-app-upgrade-test

Pass

Audited by Gen Agent Trust Hub on Mar 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Employs the Bash tool to calculate build numbers and execute Git operations for branch management and repository updates.
  • [PROMPT_INJECTION]: The skill exhibits an indirect injection surface. 1. Ingestion points: User-provided version strings collected in references/rules/upgrade-test-version.md. 2. Boundary markers: No delimiters are used when interpolating inputs into files or commands. 3. Capability inventory: Includes the ability to execute bash commands and edit GitHub Action workflows. 4. Sanitization: There is no evidence of input validation or escaping for the version strings before they are used in git checkout or written to .env.version and workflow files.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 18, 2026, 08:44 AM