route-conversion
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes shell commands using
npx tsxto run AST analysis and transformation scripts located in a toolkit directory. - [COMMAND_EXECUTION]: Runs a bash setup script (
setup.sh) from a sibling skill directory to prepare the migration environment. - [COMMAND_EXECUTION]: Executes
npx next buildas a final validation step to ensure the integrity of the migrated application. - [EXTERNAL_DOWNLOADS]: References the
blazity/next-migration-skillsrepository for installation of the required migration toolkit. - [INDIRECT_PROMPT_INJECTION]: The skill processes and transforms existing application source code which serves as an ingestion surface for external content.
- Ingestion points: Reads
.tsxand.tsroute files from the localpages/directory. - Boundary markers: Uses Abstract Syntax Tree (AST) analysis for structured transformation rather than simple text interpolation, which helps isolate code logic from processing instructions.
- Capability inventory: Includes the ability to create new files in the
app/directory, delete files in thepages/directory, and execute shell commands vianpx. - Sanitization: Relies on AST-level parsing to ensure that code transformations are based on the structural content of the source files.
Audit Metadata