skills/iwanhe/pandawa/migrate/Gen Agent Trust Hub

migrate

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary function is to perform code transformations on local test files. It follows a structured workflow that includes user confirmation before deleting any files.
  • [COMMAND_EXECUTION]: The skill uses npx playwright test to verify converted files. This is a standard and expected operation for the intended purpose of test migration and verification.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external test files (Cypress, Selenium) which are user-provided or auto-detected. While this represents a data ingestion surface, the risk is minimal as the skill performs static code mapping and the verification command is constrained to the converted test files.
  • Ingestion points: Test files (Cypress/Selenium) detected in the project directory (SKILL.md).
  • Boundary markers: None explicitly defined, but operations are limited to code translation.
  • Capability inventory: Shell command execution via npx playwright test (SKILL.md).
  • Sanitization: No explicit sanitization of test content is described, but the migration logic uses fixed mapping tables.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 02:33 PM
Security Audit — agent-trust-hub — migrate