convert-mcp-sdk-v1-to-v2
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external project files (e.g., package.json, tsconfig.json, and source files under src/) which could contain malicious instructions designed to influence the agent's behavior during the migration process.
- Ingestion points: The agent is instructed to read configuration files and all source code files in the target project directory (SKILL.md, scripts/check-v2-feasibility.sh).
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings when processing these external files.
- Capability inventory: The skill allows for local shell command execution (e.g., npx, tsc, npm) and file system modifications (via scripts/migrate-imports.sh and agent-driven edits).
- Sanitization: There is no evidence of sanitization or filtering of the external file content before it is processed by the agent.
Audit Metadata