migrate-v1-to-v2
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill identifies and processes data from the user's project files during the migration scan.
- Ingestion points: User source code files (.vue, .ts, .js) scanned via search tools in SKILL.md and components.md.
- Boundary markers: None explicitly defined to separate code data from instructions.
- Capability inventory: Terminal command execution for discovery and subsequent file modification instructions.
- Sanitization: No specific sanitization or validation of the scanned content is described.
- [EXTERNAL_DOWNLOADS]: The instructions recommend installing the @wot-ui/ui package and refer to documentation on wot-ui.cn. These are official resources provided by the vendor wot-ui.
- [COMMAND_EXECUTION]: The skill provides command-line examples using rg to perform discovery of outdated component usage within the project workspace.
Audit Metadata