batch-modernization
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution: The skill utilizes the Node.js
child_processmodule to execute Git commands and internal orchestration scripts. This functionality is essential for managing local repositories and tracking batch modernization progress.\n- External Repository Access: The skill performsgit cloneoperations to retrieve repositories based on URLs specified in a user-provided configuration file (repos.json). This is a core feature for managing multi-repository workflows.\n- Data Protection and Redaction: Multiple scripts within the skill include dedicated logic to identify and redact sensitive information, such as API keys, tokens, and credentials, from URLs and persisted state files. This helps prevent accidental exposure of secrets in logs or configuration artifacts.\n- Strict Input Validation: The skill enforces data integrity by validating all internal and external data structures against defined JSON schemas before processing. This reduces the risk of malformed input causing unexpected or insecure behavior.\n- Operational Boundaries: Instructional guardrails in the skill explicitly prohibit the agent from modifying application source code, performing unauthorized Git actions (like pushing or rewriting history), or bypassing user confirmation prompts for batch execution.
Audit Metadata