legacy-modernization
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to analyze external legacy codebases, which constitutes an ingestion surface for potentially malicious instructions hidden in data. The skill mitigates this inherent risk by instructing the agent to flag complex or arcane logic for manual human review and requiring strict data masking for any captured test fixtures.
- [SAFE]: The skill demonstrates adherence to security best practices by explicitly advising against hardcoding credentials in modernization layers and advocating for the use of secure Secrets Managers at runtime. It also correctly identifies and addresses the risk of data exposure in legacy environments.
Audit Metadata