redux-to-zustand-migrator
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a shell script,
scripts/audit-redux-store.sh, which performs a read-only scan of the project's source code usingfindandgrep. The script implements security best practices, includingset -euo pipefailand path traversal validation to prevent access outside the intended directory. - [EXTERNAL_DOWNLOADS]: The skill's instructions explicitly permit the use of standard package managers like
npmfor installing state management libraries while strictly prohibiting dangerous patterns such ascurl | bashor unverified script execution. - [PROMPT_INJECTION]: The skill analyzes external application code, creating a surface for indirect prompt injection. This is addressed through a structured three-phase process (Inventory, Plan, Execute) that requires user confirmation and manual verification steps, reducing the risk of automated obedience to embedded instructions.
- [DATA_EXFILTRATION]: The auditing process involves reading local source files to generate a migration report (
redux-store-audit.md). All operations are performed locally, and the skill includes specific rules prohibiting the exposure of secrets or credentials in the generated reports.
Audit Metadata