migrate-to-shoehorn
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@total-typescript/shoehornpackage via the npm registry. This is a well-known library maintained by a recognized entity in the TypeScript community. - [COMMAND_EXECUTION]: The skill uses
grepto identify specific code patterns (as [A-Z]) within test files (*.test.ts,*.spec.ts) to facilitate the migration process. - [PROMPT_INJECTION]: The skill processes local test files which represents a potential attack surface for indirect prompt injection. However, the risk is assessed as safe given the specific development context.
- Ingestion points: Reads content from local test files identified by grep.
- Boundary markers: None explicitly defined in the instructions.
- Capability inventory: Package installation (
npm i) and file modification permissions. - Sanitization: No specific sanitization or filtering of file content prior to processing is mentioned.
Audit Metadata