fleet-migration-factory
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focuses on providing a process framework for software modernization. The instructions and accompanying scripts are well-documented and follow best practices for data validation.
- [COMMAND_EXECUTION]: The skill utilizes local Python scripts (
validate_fleet_ledger.py) to verify the integrity of migration ledgers. Analysis of these scripts confirms they perform structural validation, regex-based digest checks, and timestamp verification on local JSON data. There are no calls toeval(),exec(), or subprocesses that execute untrusted input. - [DATA_EXFILTRATION]: No network operations (
curl,wget,fetch) or sensitive file path access (e.g., SSH keys, environment variables) were found. The toolset is designed to operate on local project files provided by the user. - [INDIRECT_PROMPT_INJECTION]: While the skill processes external data (the migration ledger JSON), it employs strict schema validation and does not use the ingested data to influence the agent's control flow or instructions. The ingestion is handled by a dedicated validation script using standard JSON parsing.
Audit Metadata