catalog-migration-analyzer
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs standard file read and write operations on paths provided via command-line arguments. The logic is restricted to extracting JSON keys and does not involve any dangerous operations such as shell execution or network requests.
- [INDIRECT_PROMPT_INJECTION]: The skill contains a processing surface for untrusted data via the
--inputfile path inrun.py. - Ingestion points:
run.pyreads JSON content from a user-controlled file path. - Boundary markers: None provided.
- Capability inventory: The script is limited to local file system access (read/write) and does not utilize any subprocess or network capabilities.
- Sanitization: None present, but the scope of data processing is limited to structural metadata (keys) rather than content execution.
Audit Metadata