migrate-to-shoehorn
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the @total-typescript/shoehorn package via npm. This is a legitimate utility for handling partial objects in TypeScript tests and is provided by a reputable community source.
- [COMMAND_EXECUTION]: The skill executes the grep command to find test files containing specific type assertion patterns. This is a standard search operation restricted to the local file system.
- [COMMAND_EXECUTION]: The skill uses npm install to integrate the required library into the project's development environment.
- [SAFE]: The skill analyzes and modifies the content of local test files to migrate code patterns.
- Ingestion points: Test files (*.test.ts, *.spec.ts) are read into the context to identify code for replacement.
- Boundary markers: No explicit instructions or delimiters are used to ensure the agent ignores instructions potentially embedded in code comments within the files.
- Capability inventory: The agent has access to file system reading/writing and shell command execution.
- Sanitization: No specific validation or sanitization is performed on the test file content before it is processed by the agent.
Audit Metadata