migrate-vertical-slice
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust migration workflow focused on incremental replacement and differential testing. Analysis of the provided instructions and scripts shows no evidence of malicious intent or common attack vectors.- [INDIRECT_PROMPT_INJECTION]: The skill ingests migration metadata from local JSON files (e.g.,
.replacement/slices/<slice-id>.json). The risk is minimal as thecheck-slice.pyscript performs structural and status validation without executing the content of the fields. - Ingestion points: Migration manifests in the
.replacement/slices/directory. - Boundary markers: None explicitly defined for the data files.
- Capability inventory: Local file reading/writing and execution of a provided Python validator script.
- Sanitization: The Python script validates JSON schema and field existence.- [COMMAND_EXECUTION]: The skill executes local Python scripts (
check-slice.py) and references environmental tools (update-manifest.py). These operations are scoped to the project directory and use structured arguments derived from the migration manifest, posing no significant risk of command injection.
Audit Metadata