migrate-to-strict-api
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection. \n
- Ingestion points: The skill reads and processes configuration files (
package.json,tsconfig.json) and project source code (.ts,.tsx,.js,.jsx) to drive its migration logic. \n - Boundary markers: The instructions do not define specific delimiters or warnings to ignore potentially malicious instructions embedded in the project files being analyzed. \n
- Capability inventory: The skill possesses the capability to modify project files and execute local commands such as
npx tscandeslint --fix. \n - Sanitization: The skill lacks explicit sanitization or validation logic for the data ingested from the project files.
Audit Metadata