framework-migration-code-migrate
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's core function is to perform a "Migration Analysis" on source codebases, which exposes the agent to untrusted data that could contain hidden prompt injection attacks.
- Ingestion points: The agent ingests external source code files and user requirements provided through the $ARGUMENTS variable in SKILL.md.
- Boundary markers: The instructions lack delimiters or specific directives to treat the source code as data only, increasing the risk that the agent might follow instructions embedded within that code.
- Capability inventory: The skill requires the agent to generate migration scripts, risk assessments, and testing strategies, implying the ability to interact with the file system and potentially execute code in a development environment.
- Sanitization: There are no instructions for the agent to sanitize, filter, or validate the content of the codebases it analyzes.
Audit Metadata