record-upgrade-instructions
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a structured procedural guide for internal maintainers. It includes security-conscious instructions that explicitly mandate authored migration scripts must not require network access, environment variables, or external inputs beyond the local filesystem.
- [COMMAND_EXECUTION]: The instructions involve routine development operations such as using
git diffto identify code changes andgit restoreto reset testing environments. It also usespnpm testcommands to validate that migration steps successfully bring example projects back to a functional state. - [REMOTE_CODE_EXECUTION]: The workflow describes authoring and executing local scripts using
tsxorjscodeshift. These are colocated within the repository and are subject to standard peer review processes before execution, with no mechanisms identified for downloading or executing untrusted remote code.
Audit Metadata