zod-nest-migrate
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
grepto scan the local filesystem for specific library imports and decorator usage patterns to assess the migration scope. - [EXTERNAL_DOWNLOADS]: The skill fetches migration guidance from the author's official GitHub repository to provide up-to-date transformation instructions for the user's codebase.
- [PROMPT_INJECTION]: The skill processes untrusted input from the user's local source code and remote documentation, which creates a surface for indirect prompt injection.
- Ingestion points: Reads project source code (
.ts),package.json, and fetches theMIGRATION.mdfile from a remote GitHub repository. - Boundary markers: None; the skill does not define specific delimiters or isolation instructions for the data it ingests.
- Capability inventory: The skill has permissions to read and write files, execute shell commands (
grep), and perform network requests (WebFetch). - Sanitization: No explicit sanitization or validation of the ingested code or documentation content is performed before processing.
Audit Metadata