enterprise-legacy-migration
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of high-quality instructional content and architectural patterns for enterprise system migration. All provided code templates (Python routing proxies, data comparison logic) and configurations (Debezium Kafka settings) are standard, benign, and aligned with the skill's stated purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest external data sources like system logs, network flow traces, and cron jobs to discover undocumented dependencies. This introduces an attack surface where malicious data in those sources could potentially influence the agent's behavior. However, this is a necessary component of the discovery phase in migration projects and does not escalate the risk beyond standard operational bounds.
- Ingestion points: SKILL.md (Step 1: Assessment and Discovery).
- Boundary markers: None identified in instructions for data isolation.
- Capability inventory: The skill provides logic for routing and data comparison but does not provide scripts for automated system-level modifications or arbitrary command execution.
- Sanitization: Not explicitly documented; relies on the agent's internal safety guardrails during data processing.
Audit Metadata