migrate
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest content from arbitrary external websites, which acts as a surface for malicious instructions to influence the agent's behavior.\n
- Ingestion points:
snapshot.mjsfetches HTML, CSS, and JS from user-provided URLs entering the agent context.\n - Boundary markers: No explicit boundary markers are used in the automated processing of external content.\n
- Capability inventory: The skill has the ability to execute shell scripts, write files to the repository, and make network requests.\n
- Sanitization:
tojsx.mjsremoves<script>tags and event handlers (e.g.,onclick) during the conversion to JSX, reducing the risk of executing malicious code embedded in the source HTML.\n- [EXTERNAL_DOWNLOADS]: Downloads assets and standard developer tools from known sources.\n - Mirrored assets (images, fonts, media) are downloaded from the source website and well-known CDNs like Google Fonts, Cloudflare, and Supabase.\n
- Standard NPM packages required for functionality are installed during setup.\n- [COMMAND_EXECUTION]: The agent runs multiple local utility scripts using
nodeto orchestrate the migration, including detection, snapshots, and code conversion.\n- [REMOTE_CODE_EXECUTION]: Executes a standard setup commandnpx playwright-core install chromiumwhich downloads a browser binary from an official source.
Audit Metadata