migrate-to-shoehorn
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
@total-typescript/shoehornpackage via npm. This is a recognized utility library within the TypeScript developer community. - [COMMAND_EXECUTION]: The workflow includes the execution of shell commands such as
npm ifor package installation andgrepto identify target test files for refactoring. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes content from local test files to perform code transformations. This creates a surface where the agent processes external data (code files). The capabilities are restricted to local refactoring and standard development tooling, and the transformation logic is specific to TypeScript assertions.
Audit Metadata