nix-flake-migration
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs legitimate analysis of local project files (Justfiles and shell scripts) to generate a migration proposal. No evidence of credential theft, data exfiltration, or unauthorized command execution was found.
- [DATA_EXPOSURE_AND_EXFILTRATION]: While the skill reads local configuration files, it does so for the purpose of creating a migration report and does not attempt to send this data to external servers or access sensitive system directories.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests local scripts and build files which could contain instructions. However, the scope is limited to generating a markdown proposal, and there are no unsafe sinks like network requests or privileged execution that would enable an attack.
Audit Metadata