orchestrating-greenfield-migration
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands such as
npm startandnpm run devto launch local application instances for parity verification. - [COMMAND_EXECUTION]: Infrastructure modification is required as part of the setup, specifically directing the agent to edit
docker-compose.ymlto expose database ports to the host machine. - [COMMAND_EXECUTION]: The orchestrator workflow relies on invoking multiple specialized subagents (e.g.,
scaffolding-data-layer,auditing-api-contracts) to perform automated tasks across the project workspace. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes external source code from the legacy application.
- Ingestion points: The agent reads and analyzes source code from the
legacy-app/andmodern-app/directories (SKILL.md). - Boundary markers: No explicit delimiters or instructions are provided to help the agent distinguish between migration commands and potential instructions embedded within the source files being audited.
- Capability inventory: The agent has permissions to execute shell commands, modify local configuration files, and dispatch subagents (SKILL.md, verification-strategy.md).
- Sanitization: There is no evidence of sanitization or validation of the ingested source code content before it is processed by the agent's logic.
Audit Metadata