batch-migration

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill implements best practices for automated refactoring, including discovery phases, dry-run previews, and mandatory verification steps using the project's own test suites.
  • [EXTERNAL_DOWNLOADS]: References the use of npx @next/codemod, an official tool from Vercel for Next.js upgrades, which is a trusted utility.
  • [COMMAND_EXECUTION]: Uses standard development commands like npm test, npm run lint, and npx tsc to verify code integrity after each batch migration.
  • [DATA_EXFILTRATION]: Accesses local source code and configuration files (package.json, tsconfig.json) to identify migration targets; no patterns of unauthorized data transmission were found.
  • [PROMPT_INJECTION]: While the skill processes codebase content which may contain indirect prompt injections (ingestion points: local source files), its rigid execution strategy effectively mitigates the risk of obeying malicious instructions embedded in comments (boundary markers: dry runs and human gates; capability inventory: shell execution and file writes; sanitization: none).
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 05:35 AM
Security Audit — agent-trust-hub — batch-migration