skills/thelobbi/claude/migration/Gen Agent Trust Hub

migration

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill utilizes npx @mui/codemod to perform automated code migrations. This involves running the official transformation utility provided by the MUI organization.
  • [EXTERNAL_DOWNLOADS]: The migration process involves installing official MUI packages (e.g., @mui/material, @mui/icons-material) and required peer dependencies like Emotion from the npm registry.
  • [COMMAND_EXECUTION]: The skill includes shell commands for package management (npm install/uninstall) and running migration scripts, which are executed using the allowed Bash tool.
  • [INDIRECT_PROMPT_INJECTION]: As the skill is designed to read and edit project source code files (*.tsx, *.ts, etc.), it is theoretically susceptible to indirect prompt injection if those files contain malicious instructions meant for the AI agent.
  • Ingestion points: Source code files targeted by the migration (JS/TS files identified via Glob).
  • Boundary markers: The instructions do not specify explicit delimiters or "ignore instructions" markers for the agent when processing file content.
  • Capability inventory: The skill utilizes Read, Glob, Grep, Bash, Write, and Edit tools, which provide significant control over the file system and local environment.
  • Sanitization: No content-specific sanitization or validation is applied to the code being migrated.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 04:16 PM