migrate-to-shoehorn
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to install the
@total-typescript/shoehornpackage via npm. This is a well-known utility library from a reputable community source and is considered a safe dependency.\n- [COMMAND_EXECUTION]: The migration workflow includes agrepcommand designed to locate type assertions within local test files (*.test.ts,*.spec.ts). This is a standard development practice and the operation is restricted to the local file system.\n- [SAFE]: No malicious patterns, such as obfuscation, credential harvesting, or unauthorized data exfiltration, were detected. The skill's behavior is entirely consistent with its stated purpose of aiding code migration.
Audit Metadata