vercel-to-cloudflare-migration

Pass

Audited by Gen Agent Trust Hub on Aug 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local utility scripts, such as scripts/new-manifest.ps1 and scripts/verify-sites.mjs, to automate the migration workflow.
  • [INDIRECT_PROMPT_INJECTION]: The scripts/verify-sites.mjs script fetches external website content to verify deployment. Although this creates an ingestion point for untrusted data, the skill's instructions restrict the agent to reporting specific verification results, reducing the risk of instructions embedded in external sites influencing the agent's behavior.
  • [SAFE]: The skill includes explicit security guidelines in SKILL.md and references/manifest-schema.md that prohibit storing sensitive information like API tokens, cookies, or billing details in the local manifest or log files.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 30, 2026, 11:57 PM