clerk-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_CONTEXT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes standard package manager commands (npm, pnpm) to list, view, and install packages. These are necessary for the skill's primary purpose of managing SDK migrations.
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the
!commandsyntax to query the current state of Clerk packages in the environment during skill load (npm list @clerk/nextjs...). This is used for diagnostic purposes and does not introduce risk in this context. - [COMMAND_EXECUTION]: Contains a script to automate the migration of
auth()calls from synchronous to asynchronous usingsed. While it modifies local files, the operations are transparent, predictable, and restricted to the declared migration scope.
Audit Metadata