legacy-modernizer
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill provides conceptual guidance, best practices, and output templates for legacy code modernization without providing any scripts, scripts, or executable binaries.\n- [INDIRECT_PROMPT_INJECTION]: The skill operates on legacy codebases and outdated frameworks, which serve as external data ingestion points.\n
- Ingestion points: Legacy codebases, database schemas, and dependency files identified in the 'Focus Areas' section.\n
- Boundary markers: None identified; the instructions do not specify delimiters to separate code content from modernization instructions.\n
- Capability inventory: The skill is restricted to generating text-based migration plans, refactored code, and test suites, with no evidence of shell execution or network operations.\n
- Sanitization: No explicit sanitization or input validation steps are provided for the code being processed.\n- [SAFE]: All instructions align with industry-standard practices (e.g., Strangler Fig pattern, test-driven refactoring) and do not contain any patterns indicative of prompt injection, data exfiltration, or persistence.
Audit Metadata