angular-migration
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data in the form of application source code during the migration process.
- Ingestion points: The skill reads application source code files (HTML, JavaScript, TypeScript) from the local filesystem to perform analysis and conversion.
- Boundary markers: There are no explicit instructions or delimiters provided to the agent to ignore potentially malicious instructions embedded in the code comments or content of the files being migrated.
- Capability inventory: The skill references a shell script (
scripts/analyze-angular-app.sh) and contains code for performing HTTP requests via Angular'sHttpClient. - Sanitization: No sanitization or validation logic is specified for handling instructions found within the processed code.
- [COMMAND_EXECUTION]: The skill references an external shell script (
scripts/analyze-angular-app.sh) in the resources section, which is intended to be executed to analyze the target application's structure and dependencies.
Audit Metadata