kthis-migration
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides scripts such as setup-paths.sh, grep-gbk.sh, and check-frontend.sh for local environment setup, code searching, and quality checks. These scripts include security measures like manual configuration parsing and input quoting to prevent unintended execution.
- [INDIRECT_PROMPT_INJECTION]: The skill involves processing legacy source code as a source of truth. It defines a rigorous workflow requiring evidence collection and manual verification to prevent the agent from being misled by untrusted legacy content.
- [EXTERNAL_DOWNLOADS]: The skill utilizes standard package managers and references an internal Nexus repository and Playwright tools, which are appropriate for its stated enterprise development context.
Audit Metadata