cxas-dfcx-migration

Pass

Audited by Gen Agent Trust Hub on May 19, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/_lint.py utilizes asyncio.create_subprocess_exec to run the cxas CLI tool, which is used for post-deployment verification of the migrated application.
  • [COMMAND_EXECUTION]: In scripts/_synthesis.py, the skill invokes a local text editor using subprocess.call and the EDITOR environment variable to allow users to manually review and edit generated agent instructions.
  • [EXTERNAL_DOWNLOADS]: The skill requires the InquirerPy Python library for interactive command-line prompts and references the Mermaid.js library from cdn.jsdelivr.net to render topology graphs in generated HTML reports.
  • [DATA_EXFILTRATION]: All network requests are directed to official Google Cloud API endpoints for agent management, with migration state persisted locally in JSON format.
  • [SAFE]: No malicious patterns, such as prompt injection, credential theft, or obfuscation techniques, were detected in the skill scripts or instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
May 19, 2026, 04:08 AM
Security Audit — agent-trust-hub — cxas-dfcx-migration