arm-soc-migration

Pass

Audited by Gen Agent Trust Hub on Jul 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill configures an MCP server that pulls the armlimited/arm-mcp:latest Docker image. This image is hosted by Arm Limited, a well-known technology provider.
  • [COMMAND_EXECUTION]: The configuration utilizes the docker command to run the migration analysis tool in a containerized environment.
  • [PROMPT_INJECTION]: The skill possesses an inherent surface for indirect prompt injection as it is designed to ingest and analyze untrusted source code.
  • Ingestion points: The workflow involves scanning project codebases for platform-specific implementations.
  • Boundary markers: There are no specific delimiters or instructions defined in the skill to prevent the agent from interpreting data within the codebase as instructions.
  • Capability inventory: The arm-mcp-server provides capabilities for architecture-aware analysis and code refactoring.
  • Sanitization: No explicit sanitization or validation of the codebase content is performed before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 27, 2026, 03:29 AM
Security Audit — agent-trust-hub — arm-soc-migration