batch-migration
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements best practices for automated refactoring, including discovery phases, dry-run previews, and mandatory verification steps using the project's own test suites.
- [EXTERNAL_DOWNLOADS]: References the use of
npx @next/codemod, an official tool from Vercel for Next.js upgrades, which is a trusted utility. - [COMMAND_EXECUTION]: Uses standard development commands like
npm test,npm run lint, andnpx tscto verify code integrity after each batch migration. - [DATA_EXFILTRATION]: Accesses local source code and configuration files (
package.json,tsconfig.json) to identify migration targets; no patterns of unauthorized data transmission were found. - [PROMPT_INJECTION]: While the skill processes codebase content which may contain indirect prompt injections (ingestion points: local source files), its rigid execution strategy effectively mitigates the risk of obeying malicious instructions embedded in comments (boundary markers: dry runs and human gates; capability inventory: shell execution and file writes; sanitization: none).
Audit Metadata