migrate-to-shoehorn
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill mentions installing the
@total-typescript/shoehornpackage. This is a well-known library for TypeScript testing and is installed via standard package managers (npm, yarn, pnpm) as a development dependency, which is safe for its intended purpose. - [COMMAND_EXECUTION]: The skill instructions involve running package manager commands and test/type checks. These are routine operations for a refactoring tool and are directed towards the user's own project environment.
- [NO_CODE]: The skill primarily consists of natural language instructions and configuration files; it does not include executable scripts (like .py or .js) that run automatically, reducing its attack surface.
Audit Metadata