render-migrate-from-heroku
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the Render CLI from Render's official GitHub repository (
render-oss/cli) which is a well-known service. The download and installation are transparently described to the user as part of the setup process. - [COMMAND_EXECUTION]: The skill executes standard development and deployment commands (e.g.,
git,render blueprints validate,pg_dump,redis-cli). These are necessary for its primary purpose of application migration and are executed following user confirmation. - [CREDENTIALS_UNSAFE]: The skill demonstrates safe secret management by instructing the agent to use
sync: falsefor sensitive environment variables inrender.yaml, ensuring that secret values are handled by the platform's UI rather than being hardcoded or stored in plain text. - [REMOTE_CODE_EXECUTION]: While the skill includes a piped shell installation for the Render CLI (
curl ... | sh), this targets a verified, official source from a well-known infrastructure provider (Render) and is a standard installation pattern for such tooling. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill handles database connection strings for migration purposes. It follows a secure pattern by encouraging the use of platform-native connection references (
fromDatabase,fromService) rather than manual string handling where possible.
Audit Metadata