zig-java-migration
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill defines a verification pipeline that involves executing standard toolchain commands such as
zig build,zig test, andzig fmt. These commands are used to ensure the migrated Zig code compiles correctly and passes all tests, which is essential for the skill's stated purpose. - [INDIRECT_PROMPT_INJECTION]: The skill processes external Java source code and test assets, which presents an inherent surface for indirect prompt injection if those files contain malicious instructions. However, the risk is mitigated by the skill's focus on evidence-based auditing and differential verification. Ingestion points: Java source files, repository modules, and test assets referenced in
SKILL.md. Boundary markers: None explicitly defined to separate source content from instructions. Capability inventory: Includes build system execution and file system operations. Sanitization: No specific sanitization methods for source code are described.
Audit Metadata