evernote-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses a dynamic context injection command in
SKILL.mdto display the currently installed version of theevernotepackage usingnpm list. This is a benign, informative use of the feature. - [COMMAND_EXECUTION]: The skill includes instructions and scripts for standard development operations, such as checking package metadata via
npm viewand performing bulk regex replacements on local source files using Node.js. These operations are consistent with the skill's primary purpose of code migration. - [DATA_EXPOSURE]: The skill references the use of
process.env.EVERNOTE_ACCESS_TOKENin test templates. This is a recommended security practice for handling sensitive credentials via environment variables rather than hardcoding them in source code.
Audit Metadata