zig-java-migration-testing
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns were detected. The skill instructions and associated scripts are focused on local test parity verification and evidence collection.
- [COMMAND_EXECUTION]: The skill involves executing a local Python audit script and standard Zig build commands. These operations are performed on local directories provided by the user and the script includes path validation to prevent traversal outside of the designated project roots.
- [DYNAMIC_EXECUTION]: The unit tests use standard Python library features to load the local audit script for regression testing. This is a common practice for internal testing and does not process untrusted or remote input.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a process where the agent reads local Java and Zig test files to verify migration progress. The logic is restricted to regex-based metadata extraction and file hash comparisons, minimizing the risk of processing malicious instructions embedded in the source data.
Audit Metadata