batch-migration

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands like npm test, npm run lint, and npx tsc --noEmit to verify the codebase after each migration batch. These are standard development practices for ensuring code quality.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npm install for package management and npx for running transformation utilities. These operations target the official npm registry and reputable software sources.
  • [REMOTE_CODE_EXECUTION]: The skill executes migration codemods such as @next/codemod via npx. This is a standard approach for applying automated upgrades provided by well-known organizations.
  • [DATA_EXFILTRATION]: No patterns associated with data exfiltration or unauthorized network communication were detected. The skill's operations are confined to the local project environment.
  • [PROMPT_INJECTION]: The skill operates on external project source code, which introduces a potential surface for indirect prompt injection.
  • Ingestion points: Project source files containing specific patterns like require or React.Component (SKILL.md).
  • Boundary markers: None explicitly defined in the prompts to separate code content from instructions.
  • Capability inventory: File system modifications and shell command execution (npm test, npx).
  • Sanitization: None specified for the processed code content.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 02:33 PM
Security Audit — agent-trust-hub — batch-migration