skills/zircote-plugins/sigint/migrate/Gen Agent Trust Hub

migrate

Pass

Audited by Gen Agent Trust Hub on Jul 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized behaviors were detected. The skill's logic is consistent with its described goal of migrating configuration files.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool for administrative tasks such as file backups (mv), JSON data manipulation (jq), and text substitution in the .gitignore file (sed). These operations are local and restricted to the project or user's configuration environment.
  • [DATA_EXFILTRATION]: The skill reads local configuration files from the project directory and the user's home directory (~/.claude/sigint.local.md). No network operations or instructions to transmit this data to remote servers were found.
  • [PROMPT_INJECTION]: The skill instructions do not contain any commands designed to subvert safety filters or extract system-level prompts.
  • [REMOTE_CODE_EXECUTION]: No patterns for downloading and executing remote scripts or unverified third-party packages were identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 17, 2026, 06:07 AM
Security Audit — agent-trust-hub — migrate