legacy-modernizer

Fail

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: CRITICALCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The assessment script in references/system-assessment.md uses the subprocess module to execute git log commands. This functionality is used to analyze codebase history and identify frequently changed files to prioritize modernization efforts.
  • [EXTERNAL_DOWNLOADS]: The skill references several well-known third-party libraries and testing tools, including FastAPI, SQLAlchemy, httpx, mutmut, hypothesis, and approvaltests. These are standard tools for building and testing modern software applications.
  • [EXTERNAL_DOWNLOADS]: The skill contains links to its documentation hosted on github.io and the author's official domain. These resources match the vendor identity provided in the skill metadata.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides tools for analyzing local source code, which serves as an ingestion point for external data.
  • Ingestion points: Python source files are read from the local file system in references/system-assessment.md using path.rglob.
  • Boundary markers: None.
  • Capability inventory: The skill includes capabilities to read local files and execute git subcommands via the subprocess module.
  • Sanitization: Code analysis is performed using the ast (Abstract Syntax Tree) module, which parses source code for safe static inspection without executing the code content.
Recommendations
  • Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Oct 16, 2026, 09:05 PM