migrate-to-rstack-cli
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONPERSISTENCE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze and process various untrusted project files as part of the migration workflow.
- Ingestion points: The agent reads project manifests (package.json), workspace catalogs, lock files, and existing tool configurations (e.g., rsbuild.config.ts, .prettierrc, .husky/pre-commit).
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' markers when the agent processes external file content.
- Capability inventory: The agent is directed to create new configuration files (e.g., rstack.config.ts), generate Git hook shims in the '.rstack/hooks' directory, install Node.js dependencies, and execute shell commands through the 'rs' CLI and project package managers.
- Sanitization: No specific sanitization or validation rules are provided for handling content extracted from the source files.
- [COMMAND_EXECUTION]: The migration process requires the agent to run multiple shell commands using the 'rs' binary (e.g., 'rs check', 'rs lint', 'rs test') and the project's package manager. These commands are used to verify the migration, update the project's lockfile, and manage dependencies.
- [PERSISTENCE]: The skill facilitates the migration of Git hooks to the Rstack system. This involves creating new hook scripts and modifying the repository's local Git configuration ('core.hooksPath') to ensure these scripts are executed during Git lifecycle events (e.g., pre-commit, pre-push).
Audit Metadata