react-modernization

Pass

Audited by Gen Agent Trust Hub on Oct 31, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The implementation playbook includes shell commands for environment setup and automated code refactoring.
  • Examples include npm install -g jscodeshift and various npx commands for running React codemods.
  • These commands are standard for the described task of React modernization and do not perform unexpected actions.
  • [EXTERNAL_DOWNLOADS]: The skill recommends downloading and running tools from the NPM registry.
  • Packages mentioned include jscodeshift, react-codeshift, and codemod.
  • These are well-known or domain-specific tools used for codebase migrations.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided React code to suggest modernization steps, which represents an indirect prompt injection surface.
  • Ingestion points: User-provided React components and project files referenced in the skill scope.
  • Boundary markers: Absent; the instructions do not specify delimiters or warnings for embedded instructions in the user's code.
  • Capability inventory: The skill documentation suggests executing shell commands for automated refactoring.
  • Sanitization: Absent; no specific input sanitization or validation logic is defined in the instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 31, 2026, 07:57 PM