react-modernization
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The implementation playbook includes shell commands for environment setup and automated code refactoring.
- Examples include
npm install -g jscodeshiftand variousnpxcommands for running React codemods. - These commands are standard for the described task of React modernization and do not perform unexpected actions.
- [EXTERNAL_DOWNLOADS]: The skill recommends downloading and running tools from the NPM registry.
- Packages mentioned include
jscodeshift,react-codeshift, andcodemod. - These are well-known or domain-specific tools used for codebase migrations.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided React code to suggest modernization steps, which represents an indirect prompt injection surface.
- Ingestion points: User-provided React components and project files referenced in the skill scope.
- Boundary markers: Absent; the instructions do not specify delimiters or warnings for embedded instructions in the user's code.
- Capability inventory: The skill documentation suggests executing shell commands for automated refactoring.
- Sanitization: Absent; no specific input sanitization or validation logic is defined in the instructions.
Audit Metadata