migrate-to-cloudcannon
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell scripts to automate local development tasks such as project auditing and file renaming. These scripts utilize standard system commands like
find,mv, andcatfor project-specific operations. - [EXTERNAL_DOWNLOADS]: The skill recommends installing official packages from the vendor and trusted community sources via
npmandnpx, including@cloudcannon/cliand@tailwindcss/typography. - [DYNAMIC_EXECUTION]: The
audit-astro.shscript employs inline Node.js execution (node -e) to programmatically parsepackage.jsonfor project metadata, which is a common practice in JavaScript development environments. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process existing project files and content. It establishes a structured migration workflow with specific phases and checklists to ensure that the ingestion and transformation of site data are handled consistently.
Audit Metadata