cds-migrator-transform
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool specifically scoped to
yarn nx run:*. This is a legitimate use of a task runner (Nx) within a monorepo to execute predefined scripts for testing, type-checking, linting, and formatting. - [DATA_EXFILTRATION]: The skill explicitly includes 'OSS hygiene' sections (Steps 3 and 6). These instructions mandate that the agent must not include internal hostnames, confidential repository names, real file paths, or internal product codenames in any code or fixtures committed to the repository.
- [EXTERNAL_DOWNLOADS]: The skill references the Sourcegraph MCP for searching external or internal repositories. This is handled via standard MCP tools and is driven by user-supplied queries and scopes, rather than the skill reaching out to unknown third-party domains autonomously.
- [PROMPT_INJECTION]: There are no patterns suggesting an attempt to bypass agent safety filters or override system instructions. The instruction set is technical and focuses entirely on the implementation of codemods.
- [COMMAND_EXECUTION]: The skill instructs the agent to create case matrices and stop for user confirmation (Step 4) before implementing automation logic, which serves as a critical security and quality checkpoint.
Audit Metadata