cxas-dfcx-migration
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/_lint.pyutilizesasyncio.create_subprocess_execto run thecxasCLI tool, which is used for post-deployment verification of the migrated application. - [COMMAND_EXECUTION]: In
scripts/_synthesis.py, the skill invokes a local text editor usingsubprocess.calland theEDITORenvironment variable to allow users to manually review and edit generated agent instructions. - [EXTERNAL_DOWNLOADS]: The skill requires the
InquirerPyPython library for interactive command-line prompts and references theMermaid.jslibrary fromcdn.jsdelivr.netto render topology graphs in generated HTML reports. - [DATA_EXFILTRATION]: All network requests are directed to official Google Cloud API endpoints for agent management, with migration state persisted locally in JSON format.
- [SAFE]: No malicious patterns, such as prompt injection, credential theft, or obfuscation techniques, were detected in the skill scripts or instructions.
Audit Metadata