deprecation-and-migration
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive engineering documentation and checklists for software development lifecycles and contains no executable code or scripts.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials, API keys, or unsafe secret handling patterns were identified. The documentation explicitly promotes secure secret management, such as using .env files and pre-commit hooks to prevent credential leakage.
- [OBFUSCATION]: No obfuscated code, hidden URLs, zero-width characters, or homoglyph attacks were detected in any of the skill files.
- [EXTERNAL_DOWNLOADS]: Mentions of external packages (e.g., axe-core, lighthouse, playwright) are provided in documentation as recommendations for user-led testing and are not automatically downloaded or executed by the skill.
- [PROMPT_INJECTION]: The skill contains standard instructional language and technical documentation. No attempts to override agent safety filters or bypass system instructions were found.
- [INDIRECT_PROMPT_INJECTION]: The skill does not define ingestion points for untrusted data. It provides guidance on securing LLM-based features, emphasizing that model output should be treated as untrusted.
Audit Metadata