migrate-to-oxvelte
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the agent to install the
oxveltetool from the author's GitHub repository (github.com/tolgaouz/oxvelte.git) usingcargo install. While this targets a vendor-owned resource, it involves downloading and executing remote code at runtime. - [COMMAND_EXECUTION]: The migration process involves several shell commands including package installations (
pnpm add,npm install), build commands (cargo build), and executing linting tools (oxlint,oxvelte). - [DYNAMIC_EXECUTION]: Ported custom ESLint rules are written to JavaScript files and dynamically loaded for execution by
oxveltevia thecustomRulessetting or byoxlintviajsPlugins. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project configuration files which could be manipulated.
- Ingestion points: Reads
eslint.config.*,.eslintrc.*,package.json, and local custom rule scripts. - Boundary markers: Absent. The skill does not provide instructions to ignore malicious content within these files.
- Capability inventory: The skill can install packages, write to the filesystem, and execute shell commands.
- Sanitization: No validation or escaping is applied to the ingested content before it is used in the migration process.
Audit Metadata