base-ui-migrator
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes scripts (
fetch-component-doc.shandrefresh-catalog.sh) that usecurlto download documentation and metadata directly fromhttps://base-ui.com. These downloads are restricted to the official domain of the library being managed and are used to provide the AI agent with up-to-date migration context. - [COMMAND_EXECUTION]: The script
scan-candidates.shutilizesripgrep(rg) orgrepto perform local static analysis on the project files. This is used to identify specific UI components from other libraries (like Radix UI or Headless UI) that are candidates for migration. The script includes logic to handle file paths safely and avoids executing arbitrary user-supplied input. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external documentation files as data to guide its code-editing behavior. While this represents a data ingestion surface, the source is the official documentation for the library, and the skill implements regex-based validation for component names in its fetching scripts to prevent path traversal or URL manipulation.
Audit Metadata