dbs-agent-migration
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's operations are limited to project-level configuration files (e.g., AGENTS.md, CLAUDE.md) and platform-specific bridge directories (e.g., ~/.claude/skills/, ~/.grok/skills/). This behavior is consistent with the primary purpose of workspace migration and utilizes standard agent integration paths.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for processing untrusted external data during the migration audit.
- Ingestion points: The agent reads existing project files such as CLAUDE.md, AGENTS.md, and various markdown files within the project's 'skills/' directory.
- Boundary markers: There are no explicit instructions to use delimiters or ignore instructions within the audited data, though the skill's purpose is to audit and restructure these files.
- Capability inventory: The skill is instructed to perform file system read, write, and movement operations to organize the workspace.
- Sanitization: The instructions do not define specific content sanitization or escaping mechanisms for the data being migrated.
- [COMMAND_EXECUTION]: No shell command execution, dynamic context injection (!command``), or unauthorized subprocess spawning was detected.
- [DATA_EXFILTRATION]: There are no network requests, remote downloads, or patterns indicating the exfiltration of sensitive project data.
Audit Metadata