v4-to-v5-migration
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs legitimate code migration tasks by replacing outdated SDK patterns with modern equivalents as part of a version upgrade.
- [DATA_EXPOSURE]: The skill identifies authentication parameters such as
sdkAppId,userId, anduserSigwithin the user's code. This is required for the migration logic to correctly move these parameters from constructor arguments to method arguments in the new SDK. No network exfiltration or storage of these values outside the user's project was found. - [COMMAND_EXECUTION]: The skill utilizes file system tools to search and replace strings within the user's project. These operations are scoped to the intended purpose of SDK migration.
- [PROMPT_INJECTION]: The skill includes instructions that process content from the user's codebase. While this constitutes an ingestion of untrusted data, the logic is highly specific to SDK pattern recognition, posing minimal risk of indirect prompt injection.
Audit Metadata