typescript-migration

Pass

Audited by Gen Agent Trust Hub on Jul 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill is designed as a developer utility for auditing and guidance during TypeScript version migrations. Its scripts are read-only, and its instructions prioritize official documentation.
  • [COMMAND_EXECUTION]: The skill includes several shell scripts (scripts/detect-ts-version.sh, scripts/audit-ts7-breakers.sh, scripts/ts6-deprecation-scan.sh, and scripts/compare-tsc7-tsc6.sh) that use standard Unix utilities (grep, sed, jq) and run the TypeScript compiler (tsc) with the --noEmit flag to perform non-destructive project analysis.
  • [EXTERNAL_DOWNLOADS]: The documentation recommends the installation of official and recognized development tools such as typescript, @typescript/typescript6, and the ts5to6 codemod. It also includes a guide for an optional third-party tool, ts-migrating, with explicit warnings and gate conditions to prevent misuse.
  • [PROMPT_INJECTION]: A static detector flagged references/unverified-claims.md for concealment. A manual review confirms this is a false positive; the file contains instructions for the AI to prioritize official Microsoft sources and refuse to validate unverified third-party claims, which is a grounding mechanism to ensure factual accuracy for the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 18, 2026, 07:51 PM
Security Audit — agent-trust-hub — typescript-migration