base-ui-migrator

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes scripts (fetch-component-doc.sh and refresh-catalog.sh) that use curl to download documentation and metadata directly from https://base-ui.com. These downloads are restricted to the official domain of the library being managed and are used to provide the AI agent with up-to-date migration context.
  • [COMMAND_EXECUTION]: The script scan-candidates.sh utilizes ripgrep (rg) or grep to perform local static analysis on the project files. This is used to identify specific UI components from other libraries (like Radix UI or Headless UI) that are candidates for migration. The script includes logic to handle file paths safely and avoids executing arbitrary user-supplied input.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests external documentation files as data to guide its code-editing behavior. While this represents a data ingestion surface, the source is the official documentation for the library, and the skill implements regex-based validation for component names in its fetching scripts to prevent path traversal or URL manipulation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 10:48 AM
Security Audit — agent-trust-hub — base-ui-migrator