qe-aqe-v2-v3-migration
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes several CLI commands including
aqe migrate,aqe test,aqe patterns list, andnpm run backupto perform the migration and verify the integrity of the new installation. - [EXTERNAL_DOWNLOADS]: Downloads and installs the
agentic-qepackage from the NPM registry to facilitate the version upgrade. - [PROMPT_INJECTION]: The skill acts on data ingested from an existing installation's configuration and memory files, which represents an indirect prompt injection surface.
- Ingestion points: Reads from
.agentic-qe/config.json,.agentic-qe/memory.db, and files within the.agentic-qe/patterns/directory. - Boundary markers: No specific delimiters or instructions to ignore embedded instructions within the migrated data are present.
- Capability inventory: Includes the ability to execute shell commands, perform directory modifications (creation of
.aqe/), and install external packages via NPM. - Sanitization: No explicit validation or sanitization routines are described for the data being transferred from the old installation to the new one.
Audit Metadata