rhdh-plugin-nfs-migration
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates by reading and analyzing a project's source code and configuration, creating an attack surface where untrusted data could influence agent behavior.
- Ingestion points: The skill reads
package.json,src/plugin.ts,src/plugin.tsx, andapp-config.dynamic.yamlfrom the local workspace (specified inSKILL.mdandworkflows/migrate-nfs.md). - Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from executing instructions potentially hidden within the files being analyzed (e.g., in comments or metadata).
- Capability inventory: The skill has the capability to execute local development commands (
yarn tsc,yarn build,yarn start) and triggers other skills that can modify the filesystem or deploy code (/rhdh-pr-create,/rhdh-local). - Sanitization: The skill does not describe any specific sanitization or filtering of the content ingested from the external workspace files.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard development commands within the host workspace, such as
yarn buildandyarn tsc, as part of the migration verification process.
Audit Metadata