data-layer-migration
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a setup script using
bash "$TOOLKIT_DIR/scripts/setup.sh". This is used to initialize the migration environment. - [COMMAND_EXECUTION]: It invokes an AST transformation tool using
npx tsx "$TOOLKIT_DIR/src/bin/ast-tool.ts". This is the primary mechanism for analyzing and migrating source code. - [DYNAMIC_EXECUTION]: Scripts are executed from computed paths derived from the skill's own file location (
$SKILL_PATHand$SKILL_DIR). This is a common pattern for local toolkits to find their own resources. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill reads project-level metadata from
.migration/target-version.txtand migration patterns from local markdown files in a sibling directory. These operations are scoped to the local project and skill repository.
Audit Metadata