migrate-to-static-config

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill performs legitimate technical migration tasks for React Navigation. Its instructions are focused on code adaptation, type safety, and project maintenance without any malicious patterns.
  • [EXTERNAL_DOWNLOADS]: The skill references official documentation sources for React Navigation to ensure up-to-date migration guidance.
  • Evidence: Instructs the agent to fetch documentation links from https://reactnavigation.org/llms.txt and https://reactnavigation.org/llms-8.x.txt.
  • [COMMAND_EXECUTION]: The workflow involves using standard CLI tools to check for package updates and verify the integrity of the migration.
  • Evidence: Instructions to run npm view, npm install, and project-specific lint/test scripts found in package.json.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external codebases, which represents an inherent surface for indirect instructions, although no specific vulnerabilities are present.
  • Ingestion points: Reads source code files (.tsx, .ts), package.json, and lockfiles to determine project structure.
  • Boundary markers: The instructions do not specify explicit delimiters for the code being analyzed.
  • Capability inventory: The agent has access to file modification and shell execution for package management and testing.
  • Sanitization: No specific input sanitization steps are defined for the analyzed code content.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 09:25 AM