migrate-v2-to-v3
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses various command-line tools such as
terraform,tofu,rg,rsync,jq, andfindto analyze infrastructure and manage configuration files.\n- [DYNAMIC_EXECUTION]: The skill executes local Python and shell scripts (e.g.,scripts/v2_to_v3_migration_assistant.py,scripts/destroy.sh) within the project directory to automate migration tasks.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied Terraform configuration files, creating a surface for potential injection via configuration comments or strings.\n - Ingestion points: Terraform configuration files (
.tf,.tfvars) in the project root.\n - Boundary markers: Relies on tool-based validation and regex rather than explicit prompt boundary markers.\n
- Capability inventory: Full ability to execute shell commands, run local scripts, and modify configuration.\n
- Sanitization: Validates code syntax via
terraform validatebut does not sanitize natural language content.\n- [SAFE]: The skill emphasizes infrastructure safety through mandatory backups, explicit plan reviews, and user approval gates for all destructive operations.
Audit Metadata