typescript-migration
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is designed as a developer utility for auditing and guidance during TypeScript version migrations. Its scripts are read-only, and its instructions prioritize official documentation.
- [COMMAND_EXECUTION]: The skill includes several shell scripts (
scripts/detect-ts-version.sh,scripts/audit-ts7-breakers.sh,scripts/ts6-deprecation-scan.sh, andscripts/compare-tsc7-tsc6.sh) that use standard Unix utilities (grep,sed,jq) and run the TypeScript compiler (tsc) with the--noEmitflag to perform non-destructive project analysis. - [EXTERNAL_DOWNLOADS]: The documentation recommends the installation of official and recognized development tools such as
typescript,@typescript/typescript6, and thets5to6codemod. It also includes a guide for an optional third-party tool,ts-migrating, with explicit warnings and gate conditions to prevent misuse. - [PROMPT_INJECTION]: A static detector flagged
references/unverified-claims.mdfor concealment. A manual review confirms this is a false positive; the file contains instructions for the AI to prioritize official Microsoft sources and refuse to validate unverified third-party claims, which is a grounding mechanism to ensure factual accuracy for the user.
Audit Metadata