prepare-migration
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation identifies a dependency on the 'impeccable' tool located at github.com/pbakaus/impeccable, which must be installed alongside the main skill.
- [EXTERNAL_DOWNLOADS]: Phase 4 (Assets prep) is designed to scan project CSS and HTML files for font URLs and automatically download these external assets to a local directory ('stardust/migrated/assets/fonts/').
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect injection as it processes data from external websites and local files. 1. Ingestion points: External site inventory crawled via Playwright and generated CSS/HTML files. 2. Boundary markers: No explicit delimiters are specified in the instructions to isolate untrusted site content. 3. Capability inventory: Performs local file system writes, network asset downloads, and orchestration of multiple migration sub-skills. 4. Sanitization: The process uses SHA-based comparison to prevent redundant downloads, but does not mention sanitizing URLs or content before execution.
Audit Metadata