batch-migration
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands like
npm test,npm run lint, andnpx tsc --noEmitto verify the codebase after each migration batch. These are standard development practices for ensuring code quality. - [EXTERNAL_DOWNLOADS]: The skill utilizes
npm installfor package management andnpxfor running transformation utilities. These operations target the official npm registry and reputable software sources. - [REMOTE_CODE_EXECUTION]: The skill executes migration codemods such as
@next/codemodvianpx. This is a standard approach for applying automated upgrades provided by well-known organizations. - [DATA_EXFILTRATION]: No patterns associated with data exfiltration or unauthorized network communication were detected. The skill's operations are confined to the local project environment.
- [PROMPT_INJECTION]: The skill operates on external project source code, which introduces a potential surface for indirect prompt injection.
- Ingestion points: Project source files containing specific patterns like
requireorReact.Component(SKILL.md). - Boundary markers: None explicitly defined in the prompts to separate code content from instructions.
- Capability inventory: File system modifications and shell command execution (
npm test,npx). - Sanitization: None specified for the processed code content.
Audit Metadata