data-migration
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes an instruction for the agent to execute a shell command (
pnpm dlx skills add philtzjp/skills ...) to install an updated skill. The instructions explicitly state that the agent must obtain user permission before running the command. - [EXTERNAL_DOWNLOADS]: The skill provides a direct URL to the author's repository on GitHub (
github.com/philtzjp/skills) to fetch the current version of the migration guidelines if they are not present locally. This is used for legitimate version management and skill synchronization.
Audit Metadata