zj-migrate-to-shoehorn
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
npm installandgrepto manage dependencies and identify code patterns. These operations are restricted to the local environment and serve the primary function of code migration. - [EXTERNAL_DOWNLOADS]: It downloads the
@total-typescript/shoehornlibrary from the public npm registry, which is a standard procedure for installing development dependencies. - [PROMPT_INJECTION]: The skill processes test files (
*.test.ts,*.spec.ts) throughgrep. This creates an indirect prompt injection surface where untrusted data enters the agent context (Ingestion points:*.test.ts). There are no explicit delimiters to ignore embedded instructions (Boundary markers: absent). The skill has capabilities to install packages and modify files (Capability inventory:npm install,grep, file write). No validation or escaping of the file content is performed (Sanitization: absent).
Audit Metadata