experience-lwc-typescript-migrate
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several CLI tools including
gitfor history-preserving file renames,jqfor parsing project configuration, andtscfor TypeScript verification. These are standard tools for the described migration workflow. - [COMMAND_EXECUTION]: The skill executes a local script,
scripts/find-consumers.sh, to identify project dependencies. This script demonstrates high security awareness by implementing strict input validation for the component name and canonicalizing paths to prevent directory traversal beyond the project root. - [PROMPT_INJECTION]: The skill ingests untrusted data by reading source code and project configuration files during the migration process. While this creates a potential surface for indirect prompt injection, the risk is mitigated by the skill's deterministic workflow and the absence of instructions to follow or execute commands found within the processed content.
Audit Metadata