cross-platform-app-port
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured templates and instructions for application porting with a strong emphasis on data safety and security. Rule 11 in SKILL.md explicitly forbids copying secrets, credentials, or private keys between repositories.
- [COMMAND_EXECUTION]: The skill includes Python scripts (
compare_screenshots.py,validate_migration_state.py,validate_skill.py) used for visual regression and state validation. These scripts perform standard file I/O and image processing (via Pillow) without spawning arbitrary shell commands or using unsafe evaluation functions. - [EXTERNAL_DOWNLOADS]: The README.md and SKILL.md refer to official Agent Skills documentation and the Pillow library for image comparison. These are well-known, trusted resources in the development community.
- [PROMPT_INJECTION]: The skill includes instructions (Rule 9 in SKILL.md) for the agent to treat source repositories and artifacts as untrusted project data and to ignore any embedded instructions that conflict with the user's primary request or safety guidelines.
Audit Metadata