zod-migration
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and refactor external TypeScript source code and test files. This establishes an attack surface where malicious content embedded in the processed files (such as comments or strings) could potentially influence the agent's behavior or output during the migration.
- Ingestion points: Command source files (
.ts) and specification files (.spec.ts) identified during the "Pre-flight" step. - Boundary markers: Absent. The instructions do not specify the use of delimiters or ignore-guards for the content being processed.
- Capability inventory: The agent performs file system reads and writes to refactor code.
- Sanitization: Absent. The skill does not instruct the agent to sanitize or validate the content of the source files before processing.
Audit Metadata