route-conversion

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Executes shell commands using npx tsx to run AST analysis and transformation scripts located in a toolkit directory.
  • [COMMAND_EXECUTION]: Runs a bash setup script (setup.sh) from a sibling skill directory to prepare the migration environment.
  • [COMMAND_EXECUTION]: Executes npx next build as a final validation step to ensure the integrity of the migrated application.
  • [EXTERNAL_DOWNLOADS]: References the blazity/next-migration-skills repository for installation of the required migration toolkit.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes and transforms existing application source code which serves as an ingestion surface for external content.
  • Ingestion points: Reads .tsx and .ts route files from the local pages/ directory.
  • Boundary markers: Uses Abstract Syntax Tree (AST) analysis for structured transformation rather than simple text interpolation, which helps isolate code logic from processing instructions.
  • Capability inventory: Includes the ability to create new files in the app/ directory, delete files in the pages/ directory, and execute shell commands via npx.
  • Sanitization: Relies on AST-level parsing to ensure that code transformations are based on the structural content of the source files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 01:59 PM