react-compiler-migration
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use
npx -y react-compiler-marker@latest, which downloads the utility from the NPM registry. This is a standard method for running temporary development tools. - [COMMAND_EXECUTION]: The workflow involves executing various CLI tools including
npx,yarn,grep, andprettierto analyze code, perform migrations, and verify results. These commands are necessary for the skill's primary function. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from an external tool to guide code changes.
- Ingestion points: Output from the
react-compiler-markerCLI (specified inskill.md). - Boundary markers: Not explicitly present; the agent is told to treat the tool output as the authoritative source of truth.
- Capability inventory: The skill has capabilities for shell command execution (
npx,yarn) and filesystem writes. - Sanitization: The workflow includes automated verification steps using
yarn jest,yarn eslint, andyarn lint:tscto validate the safety and correctness of the generated code.
Audit Metadata