migrate-to-openchoreo
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
helm templateandkustomize buildto process application manifests for analysis. It also runs a local bash script,preview.sh, to manage the preview server lifecycle.- [DYNAMIC_EXECUTION]: A local Node.js server,server.cjs, is executed to host a web-based preview of the migration plan. This server uses standard libraries to provide WebSocket reloads and serve static assets securely.- [INDIRECT_PROMPT_INJECTION]: The skill analyzes user-supplied manifests (Helm, Kustomize, Docker Compose), which serves as an ingestion point for untrusted data. - Ingestion points: External application manifests loaded in Step 2 of the migration process in
SKILL.md. - Boundary markers: The skill treats rendered manifests as data for classification rather than instructions.
- Capability inventory: Manifest rendering via subprocess calls and interactive reporting via a local web server as described in
SKILL.mdandscripts/preview.sh. - Sanitization: The preview server script
scripts/server.cjsimplements path normalization and relative path validation to prevent directory traversal attacks.
Audit Metadata