legacy-modernizer
Fail
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: CRITICALCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The assessment script in
references/system-assessment.mduses thesubprocessmodule to executegit logcommands. This functionality is used to analyze codebase history and identify frequently changed files to prioritize modernization efforts. - [EXTERNAL_DOWNLOADS]: The skill references several well-known third-party libraries and testing tools, including
FastAPI,SQLAlchemy,httpx,mutmut,hypothesis, andapprovaltests. These are standard tools for building and testing modern software applications. - [EXTERNAL_DOWNLOADS]: The skill contains links to its documentation hosted on
github.ioand the author's official domain. These resources match the vendor identity provided in the skill metadata. - [INDIRECT_PROMPT_INJECTION]: The skill provides tools for analyzing local source code, which serves as an ingestion point for external data.
- Ingestion points: Python source files are read from the local file system in
references/system-assessment.mdusingpath.rglob. - Boundary markers: None.
- Capability inventory: The skill includes capabilities to read local files and execute
gitsubcommands via thesubprocessmodule. - Sanitization: Code analysis is performed using the
ast(Abstract Syntax Tree) module, which parses source code for safe static inspection without executing the code content.
Recommendations
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata