sgds-migration
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves analyzing external, user-provided source code to plan a migration, which creates an attack surface for indirect instructions embedded in the processed files.
- Ingestion points: The
scripts/analyze_react_stack.pyscript reads.tsxand test files from a user-specified directory. Additionally, instructions inSKILL.md(Phase 1) direct the agent to scan the frontend stack and test files. - Boundary markers: Absent. There are no explicit instructions or delimiters used when processing file content to warn the agent to ignore potential instructions embedded in code comments or strings.
- Capability inventory: The skill can perform static analysis, generate JSON reports (
component_migration_plan.json), and provide detailed migration advice based on the ingested code. - Sanitization: None detected. The analysis script uses regular expressions to extract component names directly from the file content without escaping or validating the input strings.
Audit Metadata