react-19-plugin-migration
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and execute official tools provided by the vendor, including@grafana/react-detectfor compatibility scanning and@grafana/create-pluginfor scaffolding updates. These operations target the vendor's own namespace and represent legitimate development workflows. - [COMMAND_EXECUTION]: Automates complex shell-based tasks across the plugin lifecycle, including dependency management (
yarn,npm), configuration migration (ESLint v9 flat config), and Git repository management (branching, commits with--no-verify, and squashing). It specifically instructs the use of--ignore-scriptsduring package installation, which is a recommended security measure to prevent the execution of arbitrary post-install scripts from dependencies.
Audit Metadata