component-migration
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell scripts (
setup.sh) and TypeScript-based tools (ast-tool.ts) located in a sibling directory (nextjs-migration-toolkit). These are used for environment setup and Abstract Syntax Tree (AST) analysis of the codebase during migration. - [INDIRECT_PROMPT_INJECTION]: The skill ingest and processes untrusted source code from the user's project, creating a vulnerability surface for indirect prompt injection.
- Ingestion points: The skill reads files from user-defined directories including
<srcDir>,<componentFile>, and<appDir>inSKILL.mdsteps 1, 5, and 6. - Boundary markers: The instructions do not define explicit boundary markers or delimiters when reading external code files to distinguish between data and instructions.
- Capability inventory: The skill possesses the capability to execute shell scripts (
bash), run Node.js tools vianpx tsx, and read/write to the file system. - Sanitization: There is no evidence of sanitization or filtering of the processed source code content within the skill instructions.
Audit Metadata