convert-internal-package-to-typescript
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to perform standard git operations including
git mvfor file relocation and extension changes, as well asgit diffandgit logto verify file lineage. It also requires running local build, test, and lint commands as defined in the project's documentation to establish baselines and verify results. - [INDIRECT_PROMPT_INJECTION]: The skill operates by reading and processing local source code and package documentation (
packages/README.md), which represents an ingestion surface for indirect prompt injection. However, the instructions emphasize rigorous verification through automated testing and manual diff inspection, which are effective mitigations against unexpected behavior triggered by input data.
Audit Metadata