dbs-agent-migration

Pass

Audited by Gen Agent Trust Hub on Jul 27, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's operations are limited to project-level configuration files (e.g., AGENTS.md, CLAUDE.md) and platform-specific bridge directories (e.g., ~/.claude/skills/, ~/.grok/skills/). This behavior is consistent with the primary purpose of workspace migration and utilizes standard agent integration paths.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for processing untrusted external data during the migration audit.
  • Ingestion points: The agent reads existing project files such as CLAUDE.md, AGENTS.md, and various markdown files within the project's 'skills/' directory.
  • Boundary markers: There are no explicit instructions to use delimiters or ignore instructions within the audited data, though the skill's purpose is to audit and restructure these files.
  • Capability inventory: The skill is instructed to perform file system read, write, and movement operations to organize the workspace.
  • Sanitization: The instructions do not define specific content sanitization or escaping mechanisms for the data being migrated.
  • [COMMAND_EXECUTION]: No shell command execution, dynamic context injection (!command``), or unauthorized subprocess spawning was detected.
  • [DATA_EXFILTRATION]: There are no network requests, remote downloads, or patterns indicating the exfiltration of sensitive project data.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 27, 2026, 08:46 AM
Security Audit — agent-trust-hub — dbs-agent-migration