legacy-modernizer
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or unauthorized data exfiltration behaviors were detected. The skill's instructions and reference implementations follow standard software engineering practices for system migration and refactoring.
- [COMMAND_EXECUTION]: The
references/system-assessment.mdfile contains Python code for aLegacyCodeAnalyzerthat uses thesubprocessmodule to executegitcommands. This is used to identify frequently changed files ('hotspots') within a repository, which is a legitimate and safe implementation for its intended purpose of codebase analysis. - [DATA_EXPOSURE]: The skill provides code in
references/system-assessment.mdto read and parse the content of local source files usingpathlibandast. This functionality is necessary for its stated goal of performing codebase assessments and does not involve sending data to external or untrusted destinations.
Audit Metadata