effect-v4-migration
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches migration documentation from the official Effect-TS organization repository on GitHub.- [COMMAND_EXECUTION]: Provides a git command to download the migration documentation to the local filesystem during the initial setup check.- [PROMPT_INJECTION]: The skill processes external markdown files which constitutes a potential surface for indirect prompt injection attacks.
- Ingestion points: Reads migration guides from ~/.local/share/effect-solutions/effect/migration/ (as described in SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or provide warnings to ignore instructions embedded within the ingested documentation.
- Capability inventory: The skill has the capability to execute shell commands (demonstrated by the git clone setup instruction) and read/write to the filesystem.
- Sanitization: No sanitization, escaping, or validation of the external markdown content is described or performed before the agent processes the data.
Audit Metadata