migrate-to-sent
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured documentation and a local utility script for technical migration tasks. It does not perform unauthorized actions or contain malicious logic.- [PROMPT_INJECTION]: The
inventory_scan.pyscript identifies a surface for indirect prompt injection because it reads and processes local source code. However, the context is safe. - Ingestion points: The script reads code from the user-specified local repository path.
- Boundary markers: Findings are returned in a structured format, though they include code excerpts.
- Capability inventory: The scanner is a static analysis tool with no network, file-write, or execution capabilities.
- Sanitization: The
redact_excerptfunction provides automated masking of API keys and bearer tokens detected in the scan output.
Audit Metadata