windsurf-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes the
!commandsyntax in the 'Current State' section to executewindsurf --versionandcode --versionat runtime. These executions are used to inform the agent's context about the existing environment, are benign in nature, and do not incorporate unvalidated external input or sensitive data access. - [COMMAND_EXECUTION]: The skill provides several bash scripts and shell commands designed to automate the migration process. These include listing and installing IDE extensions via CLI tools (
code --list-extensions,windsurf --install-extension), copying configuration files (settings.json,.cursorrules) between local directories, and creating backups usingtar. All identified commands are standard for the stated purpose of IDE migration and do not involve privilege escalation, obfuscation, or unauthorized network operations.
Audit Metadata