opensearch-flux
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
npx tsxcommand to run a local migration tool located in thesrc/directory. This is the primary function of the skill and is used to perform migrations between user-specified endpoints.\n- [DATA_EXPOSURE]: The skill provides instructions for users to provide their own session cookies for authentication. The credentials are not hardcoded and are supplied by the user during the migration process.\n- [PROMPT_INJECTION]: The skill involves the agent parsing JSON data generated by the migration tool to verify task completion and report errors.\n - Ingestion points: The agent parses the standard output and files in the
./migration/directory produced by the CLI tool.\n - Boundary markers: No explicit delimiters are specified for the tool output.\n
- Capability inventory: The skill executes shell commands (
npx tsx) and interacts with network endpoints provided by the user.\n - Sanitization: No specific sanitization logic is described, but the data originates from the user's own OpenSearch instances.
Audit Metadata