ai-migration-operating-model

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a robust security-focused architecture for migrations, emphasizing verification over bulk generation. It includes stand-alone Python tools (control_pack_lint.py and parity_diff.py) that are deterministic and do not require external network access.
  • [COMMAND_EXECUTION]: The skill uses subprocess.run() in its evaluation and testing scripts (eval/run_eval.py, assets/test_control_pack_lint.py, assets/test_parity_diff.py). This is used for internal unit testing and validating the skill's own tooling against synthetic scenarios in a temporary directory. The command execution is scoped to the skill's own modules and does not incorporate unvalidated user input.
  • [DATA_EXPOSURE]: The skill is designed to operate offline as per its compatibility field and does not contain any patterns suggesting data exfiltration or unauthorized file access. It focuses on local JSON diffing and markdown artifact linting.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 07:06 PM
Security Audit — agent-trust-hub — ai-migration-operating-model