migrate-to-shoehorn
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the @total-typescript/shoehorn package via npm. This is a legitimate utility for TypeScript testing and the request is consistent with the skill's purpose.
- [COMMAND_EXECUTION]: The workflow includes a grep command to search for specific type assertion patterns in test files. This is a routine local development task.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it processes untrusted test files (Ingestion: files found via grep; Capability: file search and replace; Boundaries: None; Sanitization: None). However, the specific scope of the refactoring task makes this a low-risk surface.
Audit Metadata