migrate-to-cloudcannon

Pass

Audited by Gen Agent Trust Hub on Sep 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell scripts to automate local development tasks such as project auditing and file renaming. These scripts utilize standard system commands like find, mv, and cat for project-specific operations.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing official packages from the vendor and trusted community sources via npm and npx, including @cloudcannon/cli and @tailwindcss/typography.
  • [DYNAMIC_EXECUTION]: The audit-astro.sh script employs inline Node.js execution (node -e) to programmatically parse package.json for project metadata, which is a common practice in JavaScript development environments.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process existing project files and content. It establishes a structured migration workflow with specific phases and checklists to ensure that the ingestion and transformation of site data are handled consistently.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 3, 2026, 01:23 AM
Security Audit — agent-trust-hub — migrate-to-cloudcannon