contentstack-migration-companion
Warn
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs automated global installations of Node.js packages (
@contentstack/cli,contentful-cli,@contentstack/cli-utilities) and Contentstack CLI plugins usingnpm install -gandcsdx plugins:install. - [COMMAND_EXECUTION]: The
scripts/11_build_typecheck.shscript executes arbitrary shell commands defined in the target project'spackage.json(such asbuild,lint, andtypecheck) to verify the migration result. - [DATA_EXFILTRATION]: The skill programmatically accesses and extracts sensitive Contentful Management Tokens from local configuration files located at
~/.contentfulrc.jsonor~/.config/contentful/config.jsonto facilitate automated migration. - [DATA_EXFILTRATION]: The
scripts/check_prereqs.pyscript performs network requests toapi.contentful.com(the official Contentful API) using the extracted management tokens to verify the user's account and list available spaces. - [PROMPT_INJECTION]: The skill includes instructions to the agent to suppress command output and avoid displaying code snippets or shell commands in the chat interface. This concealment reduces user oversight of the specific system operations being performed during the migration.
- [COMMAND_EXECUTION]: The
scripts/check_prereqs.pyscript uses Python'ssubprocess.runto execute various system discovery and configuration commands, including environment path scanning for Node.js binaries.
Audit Metadata