tui-write-migration
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes several local command-line tools including
git,node,gh(GitHub CLI), andnpx jest. These are used to determine project versions, fetch repository metadata, and execute unit tests during the migration process. - [EXTERNAL_DOWNLOADS]: The included shell scripts (
browse-exports.shandsearch-symbol.sh) perform authenticated requests to the GitHub API to retrieve file contents and tree structures from different branches of the repository. This is a standard operation for exploring project history and does not involve downloading from untrusted sources. - [SAFE]: The skill's behavior is consistent with its stated purpose of facilitating software migrations. It leverages existing environment authentication for API calls and uses safe practices for handling variables in scripts, such as using
jqwith argument passing to prevent injection.
Audit Metadata