migrate

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external test files which could contain malicious instructions designed to exploit the migration process.
  • Ingestion points: Reads Cypress and Selenium test files from the local filesystem.
  • Boundary markers: No explicit safety delimiters are used to separate untrusted source code from agent instructions.
  • Capability inventory: Can execute shell commands and modify filesystem content.
  • Sanitization: Source content is processed without specific security validation.
  • [DYNAMIC_EXECUTION]: The skill creates new test scripts and executes them via the Playwright CLI to verify conversion success, representing the execution of dynamically generated code.
  • [COMMAND_EXECUTION]: Uses npx to run tests and initialize frameworks, which is a standard but powerful capability that interacts with external package registries.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 06:03 PM
Security Audit — agent-trust-hub — migrate