heroui-migration
Fail
Audited by Gen Agent Trust Hub on May 31, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The installation process involves
curl -fsSL https://heroui.com/install | bash, which executes a remote script from the vendor's official domain. This is a common but sensitive operation. - [EXTERNAL_DOWNLOADS]: The skill's scripts fetch migration guides from
heroui-git-docs-migration-heroui.vercel.app(a Vercel preview deployment) andheroui.com. This content is used to inform the agent's migration tasks. - [COMMAND_EXECUTION]: The skill provides Node.js scripts (
scripts/get_*.mjs) designed to be run locally to list and retrieve documentation. - [PROMPT_INJECTION]: There is a surface for indirect prompt injection through the ingestion of remote MDX content.
- Ingestion points: Migration guides are fetched from external URLs via
scripts/get_migration_guide.mjsand related scripts. - Boundary markers: The scripts do not implement specific delimiters or 'ignore' instructions for the fetched content.
- Capability inventory: The agent is instructed to use the fetched data to modify application code, including component APIs and event handlers.
- Sanitization: No validation or sanitization is applied to the content retrieved from the remote documentation servers.
Recommendations
- HIGH: Downloads and executes remote code from: https://heroui.com/install - DO NOT USE without thorough review
Audit Metadata