migrate-to-static-config
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill performs legitimate technical migration tasks for React Navigation. Its instructions are focused on code adaptation, type safety, and project maintenance without any malicious patterns.
- [EXTERNAL_DOWNLOADS]: The skill references official documentation sources for React Navigation to ensure up-to-date migration guidance.
- Evidence: Instructs the agent to fetch documentation links from
https://reactnavigation.org/llms.txtandhttps://reactnavigation.org/llms-8.x.txt. - [COMMAND_EXECUTION]: The workflow involves using standard CLI tools to check for package updates and verify the integrity of the migration.
- Evidence: Instructions to run
npm view,npm install, and project-specific lint/test scripts found inpackage.json. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external codebases, which represents an inherent surface for indirect instructions, although no specific vulnerabilities are present.
- Ingestion points: Reads source code files (
.tsx,.ts),package.json, and lockfiles to determine project structure. - Boundary markers: The instructions do not specify explicit delimiters for the code being analyzed.
- Capability inventory: The agent has access to file modification and shell execution for package management and testing.
- Sanitization: No specific input sanitization steps are defined for the analyzed code content.
Audit Metadata