migrate-to-portal
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: * Ingestion points: The skill scans local TypeScript and JSON files using grep and fetches metadata from portal.sqd.dev via curl. (File: SKILL.md) * Boundary markers: No delimiters or warnings are used to handle potential instructions embedded in the scanned files. * Capability inventory: Executes shell commands (grep, curl), performs network operations, and installs/updates packages. * Sanitization: No specific sanitization or validation of the ingested data is specified.
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of official Subsquid packages and diagnostic metadata from vendor-owned domains (portal.sqd.dev, v2.archive.subsquid.io). (Files: SKILL.md, references/evm-example-diff.md, references/solana-example-diff.md)
- [COMMAND_EXECUTION]: The skill guides the user to run diagnostic commands (grep, curl) and package management operations (npm, npx) that are standard for technical code migration. (Files: SKILL.md, references/common-errors.md)
Audit Metadata