Skills
Navigate
skills/devcxl/mattpocock-skills-zh/migrate-to-shoehorn/Gen Agent Trust Hub

migrate-to-shoehorn

Pass

Audited by Gen Agent Trust Hub on Jul 21, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute npm i @total-typescript/shoehorn and use grep to find specific patterns within the codebase. These are standard development operations.
  • [SAFE]: The dependency @total-typescript/shoehorn is a well-known library from a reputable source in the TypeScript community.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data (local test files) to perform migrations.
  • Ingestion points: Test files with .test.ts and .spec.ts extensions.
  • Boundary markers: None specified in the workflow.
  • Capability inventory: File reading, file writing, and package installation via npm.
  • Sanitization: No explicit sanitization or validation of the files being read is mentioned.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 21, 2026, 04:05 AM
Security Audit — agent-trust-hub — migrate-to-shoehorn