opus-4-7-migration
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a Python script (
scripts/scan.py) intended to be run locally by the user to scan their own source code. It uses standard library modules (argparse,re,pathlib) to perform regex-based static analysis. It does not execute the files it scans. - [DATA_EXPOSURE]: The script reads local files to perform its scan but does not transmit any data externally. It includes a default exclusion list for sensitive directories like
.gitand.venvto prevent accidental scanning of metadata or dependencies. - [PROMPT_INJECTION]: The skill instructions do not contain any patterns attempting to override agent safety or system instructions. It focuses purely on scanning for technical migration patterns.
- [REMOTE_CODE_EXECUTION]: There are no patterns involving remote script execution, package installation, or dynamic loading of untrusted code. The skill relies entirely on the provided local script.
Audit Metadata