modernize-move
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes "aptos move test" and "aptos move test --coverage" via the Bash tool to establish baselines and verify that modernization transformations preserve contract behavior. This is an expected and necessary function for a code migration tool.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted Move source code and possesses the capability to modify the filesystem and execute tests. This represents a potential indirect injection surface where malicious input code could attempt to influence the agent's behavior.
- Ingestion points: Reads .move source files from the sources/ directory and existing test files.
- Boundary markers: The instructions do not define specific delimiters or 'ignore' instructions for the ingested code content.
- Capability inventory: The skill uses Write and Edit tools to refactor code and the Bash tool to run the Move compiler/test runner.
- Sanitization: The skill relies on pre-defined regex patterns and tiered transformation logic rather than dynamic interpretation of the source code's semantic intent, which limits the effectiveness of injection attempts.
Audit Metadata