migrate-to-shoehorn
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
@total-typescript/shoehornpackage via npm. This is the standard method for adding this utility to a project and targets a well-known community resource. - [COMMAND_EXECUTION]: The skill suggests using a
grepcommand to identify files containing specific TypeScript assertion patterns. This is a standard and safe use of system search utilities for code migration tasks. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external test files, which constitutes an ingestion surface. Ingestion points: Local test files (
*.test.ts,*.spec.ts) processed during the migration workflow. Boundary markers: None present in the instructions. Capability inventory: Searching files viagrep, installing packages vianpm, and performing code replacements. Sanitization: The skill relies on specific pattern matching for assertions, which minimizes the risk of executing arbitrary instructions found within the processed files.
Audit Metadata