sgds-migration

Pass

Audited by Gen Agent Trust Hub on Sep 3, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves analyzing external, user-provided source code to plan a migration, which creates an attack surface for indirect instructions embedded in the processed files.
  • Ingestion points: The scripts/analyze_react_stack.py script reads .tsx and test files from a user-specified directory. Additionally, instructions in SKILL.md (Phase 1) direct the agent to scan the frontend stack and test files.
  • Boundary markers: Absent. There are no explicit instructions or delimiters used when processing file content to warn the agent to ignore potential instructions embedded in code comments or strings.
  • Capability inventory: The skill can perform static analysis, generate JSON reports (component_migration_plan.json), and provide detailed migration advice based on the ingested code.
  • Sanitization: None detected. The analysis script uses regular expressions to extract component names directly from the file content without escaping or validating the input strings.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 3, 2026, 01:18 AM
Security Audit — agent-trust-hub — sgds-migration