agent-migration-specialist
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external codebases for modernization and migration, creating a surface for instructions embedded in source code to influence agent behavior.
- Ingestion points: The skill receives input through the
$ARGUMENTSvariable and is intended to process external files within a target codebase (SKILL.md). - Boundary markers: Absent. The instructions do not define specific delimiters or instructions to treat codebase content strictly as data.
- Capability inventory: The agent is designated as
general-purposeand its described tasks (codemods, dependency updates) imply capabilities for filesystem modification and shell command execution. - Sanitization: Absent. There are no instructions for sanitizing or filtering instructions that might be present in the files being migrated.
- [NO_CODE]: The skill consists only of a SKILL.md instructional file and does not include any accompanying executable scripts or binary files, reducing the risk of direct malicious execution.
Audit Metadata