Skills
Navigate
skills/louis-salvosa0101/skills/migrate-to-shoehorn/Gen Agent Trust Hub

migrate-to-shoehorn

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the @total-typescript/shoehorn package using npm. This is a legitimate utility library from a reputable source for TypeScript testing.
  • [COMMAND_EXECUTION]: Uses standard development commands like npm install and grep to manage dependencies and identify code patterns for refactoring.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied test files which presents a potential injection surface.
  • [INDIRECT_PROMPT_INJECTION]: Ingestion points: Test files identified by grep in SKILL.md.
  • [INDIRECT_PROMPT_INJECTION]: Boundary markers: None present.
  • [INDIRECT_PROMPT_INJECTION]: Capability inventory: npm install command execution and file reading/writing.
  • [INDIRECT_PROMPT_INJECTION]: Sanitization: None specified.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 05:34 AM