shift
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a high-level orchestrator for professional software maintenance tasks. It leverages well-known, industry-standard tools such as jscodeshift, ast-grep, and OpenRewrite to automate code transformations. Findings indicate that the skill follows a 'security-first' approach by incorporating official security alerts (e.g., referencing CISA's 2026 advisory on Axios) and recommending native API replacements to reduce dependency attack surfaces. The 'detect' and 'radar' recipes specifically address supply chain risks and dependency health, aligning with standard security best practices. All external references target official documentation or trusted repositories (e.g., GitHub, React team, Svelte official site).
Audit Metadata