migrate-to-shoehorn

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the @total-typescript/shoehorn package via npm. This is a recognized utility library within the TypeScript developer community.
  • [COMMAND_EXECUTION]: The workflow includes the execution of shell commands such as npm i for package installation and grep to identify target test files for refactoring.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes content from local test files to perform code transformations. This creates a surface where the agent processes external data (code files). The capabilities are restricted to local refactoring and standard development tooling, and the transformation logic is specific to TypeScript assertions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 02:14 AM