render-migrate-from-heroku

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the Render CLI from Render's official GitHub repository (render-oss/cli) which is a well-known service. The download and installation are transparently described to the user as part of the setup process.
  • [COMMAND_EXECUTION]: The skill executes standard development and deployment commands (e.g., git, render blueprints validate, pg_dump, redis-cli). These are necessary for its primary purpose of application migration and are executed following user confirmation.
  • [CREDENTIALS_UNSAFE]: The skill demonstrates safe secret management by instructing the agent to use sync: false for sensitive environment variables in render.yaml, ensuring that secret values are handled by the platform's UI rather than being hardcoded or stored in plain text.
  • [REMOTE_CODE_EXECUTION]: While the skill includes a piped shell installation for the Render CLI (curl ... | sh), this targets a verified, official source from a well-known infrastructure provider (Render) and is a standard installation pattern for such tooling.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill handles database connection strings for migration purposes. It follows a secure pattern by encouraging the use of platform-native connection references (fromDatabase, fromService) rather than manual string handling where possible.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 03:47 PM
Security Audit — agent-trust-hub — render-migrate-from-heroku