opensearch-flux

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the npx tsx command to run a local migration tool located in the src/ directory. This is the primary function of the skill and is used to perform migrations between user-specified endpoints.\n- [DATA_EXPOSURE]: The skill provides instructions for users to provide their own session cookies for authentication. The credentials are not hardcoded and are supplied by the user during the migration process.\n- [PROMPT_INJECTION]: The skill involves the agent parsing JSON data generated by the migration tool to verify task completion and report errors.\n
  • Ingestion points: The agent parses the standard output and files in the ./migration/ directory produced by the CLI tool.\n
  • Boundary markers: No explicit delimiters are specified for the tool output.\n
  • Capability inventory: The skill executes shell commands (npx tsx) and interacts with network endpoints provided by the user.\n
  • Sanitization: No specific sanitization logic is described, but the data originates from the user's own OpenSearch instances.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 02:03 PM
Security Audit — agent-trust-hub — opensearch-flux