migrate-rename
Pass
Audited by Gen Agent Trust Hub on Nov 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to perform file system operations using standard shell commands such as
mvfor renaming files andpythonto execute a local maintenance script. - [INDIRECT_PROMPT_INJECTION]: The provided utility
scripts/moved_stub_check.pyprocesses local project files (*.MOVED.mdand*.MIGRATED.md) to verify migration metadata. - Ingestion points: Reads files from the project directory provided as a command-line argument.
- Boundary markers: None; the script parses plain text key-value pairs.
- Capability inventory: The script outputs parsed metadata to stdout, which is then processed by the agent. It does not execute the contents of the files.
- Sanitization: None; the script performs basic regex extraction and date parsing, but the risk is minimal as it is a local development tool.
Audit Metadata