translate-programming-language
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is composed entirely of instructional Markdown files and configuration templates. It does not include executable scripts, binary payloads, or external network requests.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external source code and test files during language migrations, which constitutes a data ingestion surface. However, the instructions focus on assisting a human developer with structured workflows (fixture generation, parity testing, and documentation), which is standard for development-oriented tools and presents no inherent security risk in this context.
- [REMOTE_CODE_EXECUTION]: While the skill mentions commands such as
make oracle-refreshandgit diff, these are presented as examples of developer-managed workflows rather than automated or hidden execution patterns. - [DATA_EXFILTRATION]: No exfiltration patterns, sensitive file access, or network operations to non-whitelisted domains were detected. The workflow emphasizes keeping migration documentation free of domain-specific sensitive data.
Audit Metadata