run-migration

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill interacts with local development environment tools including git, adb (Android Debug Bridge), and xcrun simctl (iOS Simulator) using execFileSync and spawnSync. These commands are used for legitimate purposes such as verifying repository state, managing application databases on connected emulators or simulators, and performing snapshot restoration drills.
  • [DYNAMIC_EXECUTION]: The skill implements a runtime TypeScript loading mechanism using module.registerHooks and dynamic import(). This allows the check-migration utility to execute the application's own migration scripts and validation logic directly within a Node.js environment for testing purposes.
  • [DYNAMIC_EXECUTION]: During self-testing, the skill generates temporary shell script stubs and modifies the PATH environment variable to mock the behavior of mobile development utilities. This enables the verification of the tool's logic without requiring physical mobile devices.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 11:22 AM