tigris-s3-migration
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of official vendor packages including
@tigrisdata/cli,@tigrisdata/storage, andtigris-boto3-extfrom standard package registries (NPM, PyPI). - [COMMAND_EXECUTION]: Instructions include commands for data migration and bucket management using the Tigris CLI (
tigris buckets set-migration,tigris cp), AWS CLI (aws s3 sync), Google Cloud SDK (gsutil), and Azure CLI (az). These are standard tools required for the stated migration purpose. - [CREDENTIALS_UNSAFE]: The documentation uses explicit placeholders (e.g.,
AKIA_YOUR_AWS_KEY,YOUR_AWS_SECRET,tid_xxx) to demonstrate where users should provide their own credentials. It encourages using.envfiles for secret management, which is a safe practice. - [INDIRECT_PROMPT_INJECTION]: The skill defines a clear ingestion surface by processing migration-related user requests and provides a capability inventory that includes file modifications and command execution. These actions are appropriately scoped to the primary purpose of migrating storage providers.
Audit Metadata