react19-source-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes grep command templates in references/api-migrations.md to help agents find specific code patterns in the source directory. These commands are standard, read-only search operations intended for project auditing.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and refactor external source code, which constitutes an indirect prompt injection surface.
- Ingestion points: Project source files scanned using patterns defined in references/api-migrations.md.
- Boundary markers: Absent; instructions do not provide explicit delimiters or warnings for embedded instructions in target source files.
- Capability inventory: The skill suggests command execution via grep and assumes the agent will perform file modifications based on the reference patterns.
- Sanitization: Absent; the skill relies on the agent's ability to interpret and refactor code directly.
Audit Metadata