migrate-to-shoehorn

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the @total-typescript/shoehorn package using npm. This is a well-known utility library in the TypeScript community used for safe partial objects in tests.- [COMMAND_EXECUTION]: The skill uses the grep command to search for TypeScript type assertion patterns within files ending in .test.ts or .spec.ts.- [INDIRECT_PROMPT_INJECTION]: The skill reads the content of local test files to identify code for migration.
  • Ingestion points: Local .test.ts and .spec.ts files are scanned using grep in SKILL.md.
  • Boundary markers: No specific delimiters are used to separate file content from agent instructions.
  • Capability inventory: The skill is capable of executing shell commands (npm, grep) and modifying files as part of the migration.
  • Sanitization: The skill performs string replacements on code and does not require specific sanitization for its migration logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 06:48 AM