contentstack-migration-companion

Warn

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill performs automated global installations of Node.js packages (@contentstack/cli, contentful-cli, @contentstack/cli-utilities) and Contentstack CLI plugins using npm install -g and csdx plugins:install.
  • [COMMAND_EXECUTION]: The scripts/11_build_typecheck.sh script executes arbitrary shell commands defined in the target project's package.json (such as build, lint, and typecheck) to verify the migration result.
  • [DATA_EXFILTRATION]: The skill programmatically accesses and extracts sensitive Contentful Management Tokens from local configuration files located at ~/.contentfulrc.json or ~/.config/contentful/config.json to facilitate automated migration.
  • [DATA_EXFILTRATION]: The scripts/check_prereqs.py script performs network requests to api.contentful.com (the official Contentful API) using the extracted management tokens to verify the user's account and list available spaces.
  • [PROMPT_INJECTION]: The skill includes instructions to the agent to suppress command output and avoid displaying code snippets or shell commands in the chat interface. This concealment reduces user oversight of the specific system operations being performed during the migration.
  • [COMMAND_EXECUTION]: The scripts/check_prereqs.py script uses Python's subprocess.run to execute various system discovery and configuration commands, including environment path scanning for Node.js binaries.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 15, 2026, 02:54 PM
Security Audit — agent-trust-hub — contentstack-migration-companion