migrate-to-shoehorn
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for a standard library migration workflow using @total-typescript/shoehorn, a legitimate TypeScript utility by a well-known developer.
- [COMMAND_EXECUTION]: The skill includes routine developer commands, such as using
grepto locate specific code patterns within test files andnpm installfor dependency management. These actions are appropriate for the skill's stated purpose of code migration. - [EXTERNAL_DOWNLOADS]: The skill recommends installing a package from the official NPM registry. This is a standard development practice and the package is a recognized community tool.
- [INDIRECT_PROMPT_INJECTION]: While the skill involves reading local codebase files (test files) which constitutes an ingestion surface, the lack of dangerous capabilities like network exfiltration or elevated privilege commands makes this a low-risk, standard operation for a code-refactoring assistant.
Audit Metadata