legacy-modernizer

Pass

Audited by Gen Agent Trust Hub on Apr 13, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [SAFE]: No malicious patterns, prompt injections, or unauthorized data exfiltration behaviors were detected. The skill's instructions and reference implementations follow standard software engineering practices for system migration and refactoring.
  • [COMMAND_EXECUTION]: The references/system-assessment.md file contains Python code for a LegacyCodeAnalyzer that uses the subprocess module to execute git commands. This is used to identify frequently changed files ('hotspots') within a repository, which is a legitimate and safe implementation for its intended purpose of codebase analysis.
  • [DATA_EXPOSURE]: The skill provides code in references/system-assessment.md to read and parse the content of local source files using pathlib and ast. This functionality is necessary for its stated goal of performing codebase assessments and does not involve sending data to external or untrusted destinations.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 13, 2026, 04:04 PM
Security Audit — agent-trust-hub — legacy-modernizer