migrate-skill-agent

Pass

Audited by Gen Agent Trust Hub on Aug 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a shell script to manage local files using standard utilities like rsync, cp, and ln. These operations are restricted to specific subdirectories within the user's home or project directory.- [EXTERNAL_DOWNLOADS]: The script performs git clone and git pull operations to retrieve content from the author's repository at github.com/Mineru98/skills-store. It includes a verification function to ensure the repository remote matches the expected official URL before execution.- [SAFE]: The skill implements input sanitization using regular expressions to prevent path traversal and command injection when processing skill names. It also verifies repository authenticity before pulling updates, which is a security best practice for migration tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 11, 2026, 06:52 PM
Security Audit — agent-trust-hub — migrate-skill-agent