node-26
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access detected. The skill focuses on documented Node.js migration paths.
- [COMMAND_EXECUTION]: Provides
ripgrep(rg) commands to scan the local filesystem for specific API patterns. This is a legitimate development task for static analysis. - [EXTERNAL_DOWNLOADS]: References official Node.js release notes and API documentation from
nodejs.org, which is a well-known and trusted service. - [SAFE]: Analysis of indirect prompt injection surface (Category 8):
- Ingestion points: Local project source code through
ripgrepsearch results. - Boundary markers: Not explicitly defined in the provided commands.
- Capability inventory: Filesystem scanning (
rg), package manager operations (npm/yarn/pnpm), and test execution. - Sanitization: No specific sanitization of codebase content before processing.
- Conclusion: The capability is constrained to developer-led migration tasks and does not involve processing untrusted external data.
Audit Metadata