dependency-mapping

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill executes a setup script and an AST analysis tool from a computed directory path relative to the skill's location. This is used to initialize the migration environment and perform the audit.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific data from package.json files to perform dependency mapping.
  • Ingestion points: Path to the local package.json file provided by the agent/user.
  • Boundary markers: None explicitly defined in the shell execution commands.
  • Capability inventory: Shell script execution, file system writes to a .migration directory, and running external TypeScript analysis tools.
  • Sanitization: Not explicitly present in the skill markdown instructions.
  • [COMMAND_EXECUTION]: The skill provides templates and instructions for the agent to generate and execute package manager commands such as npm install and npm uninstall to manage project dependencies.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 01:59 PM