migrate-to-shoehorn

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the @total-typescript/shoehorn package from the official NPM registry. This is a recognized utility library for TypeScript testing.
  • [COMMAND_EXECUTION]: The skill utilizes npm install for dependency management and grep for identifying specific code patterns in test files. These commands are appropriate for the skill's stated purpose of code migration.
  • [PROMPT_INJECTION]: The migration process involves reading and processing existing test files. While this creates a potential surface for indirect prompt injection if source files contained malicious instructions, the intended actions (replacing type assertions with library functions) are specific and the risk is considered low in this context.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 03:08 AM
Security Audit — agent-trust-hub — migrate-to-shoehorn