migrate-commet-v7-to-v8
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No malicious override or bypass patterns were detected. The instructions are limited to technical migration steps and do not attempt to manipulate the agent's safety guidelines.
- [DATA_EXPOSURE]: The skill instructs the agent to locate SDK imports, API pins, and configuration files (such as package.json or go.mod). This is a standard requirement for software migration and does not involve accessing sensitive system credentials or private keys.
- [EXTERNAL_DOWNLOADS]: The skill references official Commet documentation and GitHub repositories for SDK updates. These resources originate from the verified vendor (commet-labs) and are used appropriately for obtaining version information.
- [INDIRECT_PROMPT_INJECTION]: The skill processes existing project code as untrusted input. While this is an ingestion surface, the risk is mitigated by specific verification instructions that ensure the agent only modifies integration-related code and performs standard validation checks (typechecking and testing).
Audit Metadata