migrate-to-shoehorn
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the @total-typescript/shoehorn package via npm, which is a legitimate and widely used utility for TypeScript testing.
- [COMMAND_EXECUTION]: The skill uses standard developer commands such as npm install and grep to perform targeted refactoring of test files.
- [SAFE]: The skill's behavior is transparent and confined to code migration within test files, with no evidence of obfuscation or data exfiltration.
Audit Metadata