version-migration
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides various Bash scripts such as audit-components.sh and detect-version.sh that utilize standard Unix tools like grep, sed, and find to perform read-only analysis of the project's source code and configuration files.
- [DYNAMIC_EXECUTION]: The setup-playwright-vrt.sh script automates the creation of a Playwright testing environment by writing configuration and test specification files including playwright.config.ts and e2e/components.spec.ts to the local project directory.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external project data including package.json and source files within the src directory. 1. Ingestion points: Project configuration and source files. 2. Boundary markers: Not applicable for grep-based auditing tools. 3. Capability inventory: Local file system read and targeted scaffolding write. 4. Sanitization: Pattern matching is restricted to library-specific migration keywords.
Audit Metadata