modernize-ui5-app

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard command-line interfaces, including npm, npx, mvn, and git, to manage project dependencies, execute linting tools, and run verification builds. These operations are essential for its primary function of software modernization.
  • [COMMAND_EXECUTION]: Local utility scripts (such as verify-component.js and detect-blind-spots.js) are executed using Node.js to perform specific validation and detection tasks during the modernization process.
  • [EXTERNAL_DOWNLOADS]: The workflow uses npx and npm to invoke the @ui5/linter tool. This tool originates from the official UI5 ecosystem and is a standard component of the modernization lifecycle.
  • [SAFE]: File access and data processing are restricted to local project configuration files (manifest.json, package.json, pom.xml) and the extraction of modernization metrics. No indicators of data exfiltration or credential harvesting were identified.
  • [SAFE]: The skill includes instructions for a 'non-interactive mode' to facilitate automation. This is a standard architectural feature for CI/CD integration and does not attempt to bypass security filters or safety guidelines.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 07:10 AM
Security Audit — agent-trust-hub — modernize-ui5-app