migrate-to-shoehorn
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@total-typescript/shoehornpackage using npm. This is a well-known utility library in the TypeScript community used for safe partial objects in tests.- [COMMAND_EXECUTION]: The skill uses thegrepcommand to search for TypeScript type assertion patterns within files ending in.test.tsor.spec.ts.- [INDIRECT_PROMPT_INJECTION]: The skill reads the content of local test files to identify code for migration. - Ingestion points: Local
.test.tsand.spec.tsfiles are scanned usinggrepinSKILL.md. - Boundary markers: No specific delimiters are used to separate file content from agent instructions.
- Capability inventory: The skill is capable of executing shell commands (
npm,grep) and modifying files as part of the migration. - Sanitization: The skill performs string replacements on code and does not require specific sanitization for its migration logic.
Audit Metadata