react-class-to-hooks-migrator
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a shell script
scripts/audit-class-components.shfor project auditing. The script executesfindandgreplocally and includes basic path traversal checks. It uses safe argument handling for file processing. - [PROMPT_INJECTION]: The skill's primary function involves analyzing and rewriting user-provided source code, which constitutes an indirect prompt injection surface. 1. Ingestion points: React source files are scanned by the audit script and interpreted by the agent. 2. Boundary markers: There are no specialized delimiters defined to wrap the ingested code. 3. Capability inventory: The skill can write files and execute npm install within the project scope. 4. Sanitization: The agent is instructed to validate JSX/TSX syntax and perform verification checks before finalization.
Audit Metadata