enonic-content-migration
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions in
SKILL.mddirect the agent to execute a local scriptnode scripts/find-enonic-targets.mjs .during the project discovery phase. - Evidence: Found in
SKILL.mdunder Step 1: 'Execute node scripts/find-enonic-targets.mjs . to scan for Enonic XP project markers'. - Analysis: This script is a utility provided within the skill package that scans the local filesystem for Enonic XP project markers (like
build.gradle) and existing content scripts. It performs read-only operations on the workspace and does not initiate network connections or modify system settings. This is a standard project discovery pattern. - [DATA_EXPOSURE]: The provided discovery script reads configuration and source files within the user's workspace to identify the environment.
- Evidence:
scripts/find-enonic-targets.mjsusesreadFileandreaddirto inspect files such asbuild.gradleandgradle.propertiesup to a directory depth of 5. - Analysis: The data access is scoped to the local workspace and is strictly used to determine the Enonic XP version and application name to guide the agent in generating compatible code. No data is sent to external servers.
Audit Metadata