ionic-appflow-migration
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the dynamic context syntax in SKILL.md to execute shell commands when the skill is loaded. These commands include a Node.js script that parses the project's package.json to identify specific dependencies (like @capacitor/live-updates) and scripts related to Ionic Appflow, and a find command to locate relevant configuration files. This is used to automatically populate the agent's context with a snapshot of the project's current state.
- [COMMAND_EXECUTION]: The skill leverages Bash to run localized Node.js scripts and file system search commands. These operations are read-only and restricted to the local repository, serving as a diagnostic tool for the migration workflow.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests metadata from the project's package.json and file system which could potentially be manipulated by a malicious actor if the project files themselves were compromised.
- Ingestion points: Data is gathered from package.json and the directory structure during skill initialization.
- Boundary markers: The skill does not use specific delimiters or instructions to ignore content inside the injected snapshot.
- Capability inventory: The skill uses Bash tools for project analysis and migration steps.
- Sanitization: The skill extracts and prints raw strings from the project's configuration without additional validation or escaping.
Audit Metadata