react-modernization
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches automated refactoring scripts from the official React GitHub repository (
reactjs/react-codemod) to perform transformations like renaming lifecycle methods and updating imports. - [REMOTE_CODE_EXECUTION]: Executes JavaScript transformation logic fetched from remote URLs using the
npx jscodeshiftcommand. - [COMMAND_EXECUTION]: Invokes shell commands through
npxto runjscodeshiftandcodemodtools for codebase transformations. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided source code which could potentially contain malicious instructions intended to influence the agent's behavior during the refactoring process.
- Ingestion points: The skill ingests and processes React source code files located in the
src/directory (e.g.,SKILL.md). - Boundary markers: No specific boundary markers or instructions to ignore embedded content within the source code are defined.
- Capability inventory: The skill uses
npxfor shell execution and has the ability to write/modify files on the local file system via codemod scripts. - Sanitization: There is no evidence of sanitization or validation of the source code content before it is processed by the transformation tools.
Audit Metadata