tailrocks-typescript-migrate
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes source code and repository files, which are external untrusted data sources.\n- Ingestion points: Source files and project metadata targeted for TypeScript migration.\n- Boundary markers: The references/runtime-trust.md file defines a clear security policy, instructing the agent to treat repository content as untrusted and to ignore embedded instructions.\n- Capability inventory: The skill performs source code modification and executes Bun-based toolchains for type-checking and testing.\n- Sanitization: Security is managed through strict boundary instructions and policy definitions rather than programmatic sanitization.
Audit Metadata