ng-migrate
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses official, verified Angular schematics (@angular/core:*) and package management tools (pnpm, ng update) for its primary operations. No unauthorized network access, remote script execution, or credential exposure was detected.\n- [INDIRECT_PROMPT_INJECTION]: The skill has an inherent attack surface because it reads and modifies the user's project code during migrations.\n
- Ingestion points: The agent reads component source code, templates, and project configurations (package.json, angular.json) within the target scope.\n
- Boundary markers: The skill mandates a clean Git repository before starting, executes an automated 'gauntlet' (build, lint, test) after every step, and requires explicit user review and commits between migrations.\n
- Capability inventory: Commands include pnpm exec ng generate, ng build, ng test, ng lint, and git operations.\n
- Sanitization: Relies on the logic provided by official Angular core schematics, which are established tools for safe code transformations.
Audit Metadata