migrate-to-rslib
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of markdown instructions and checklists for a migration process. It does not contain any executable scripts, automated network requests, or dangerous commands.
- [INDIRECT_PROMPT_INJECTION]: The workflow requires the agent to read and interpret project-specific configuration files such as package.json, tsconfig.json, and tsup configs. While these files are external and untrusted, the skill's instructions focus on standard migration patterns and build verification, presenting a minimal attack surface.
- Ingestion points: The agent reads
package.json,tsconfig.json, andtsup.config.*files from the project environment. - Boundary markers: No explicit delimiters or instructions are provided to the agent to treat content in these files as untrusted.
- Capability inventory: The skill involves running project build commands and modifying configuration and dependency files.
- Sanitization: No automated sanitization of the configuration data is performed as the skill is instructional in nature.
Audit Metadata