droneci-migration
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill consists of markdown-based reference guides and report templates. All external references point to well-known GitHub Actions (e.g., actions/checkout, slackapi/slack-github-action) or standard linting tools (actionlint).
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to assist in the processing of external Drone CI configuration files (.drone.yml). While the skill's own content is safe, an attacker-controlled configuration file could theoretically contain instructions designed to influence the migration output. This risk is inherent to migration tools and is mitigated by the fact that the skill primarily provides static templates and mapping logic for the agent to follow.
Audit Metadata