react-native-ease-refactor
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data by scanning the project's source code files (
**/*.{ts,tsx,js,jsx}) andpackage.jsonto identify animation patterns. This constitutes an indirect prompt injection surface where malicious code comments or patterns could theoretically influence the agent's output. However, the risk is effectively mitigated by the skill's architecture: - Ingestion points: Project source files and dependency manifests in Phase 1.
- Boundary markers: The agent acts under a strict 6-phase operational framework designed for migration.
- Capability inventory: File system read/write and use of discovery tools like
grep. - Sanitization/Mitigation: The skill generates a comprehensive
Migration Report(Phase 3) and requires explicit user consent through theAskUserQuestiontool (Phase 4) before any code changes are applied, ensuring a human reviews the proposed modifications. - [COMMAND_EXECUTION]: The instructions utilize the
greptool for discovering specific code patterns and dependency versions. This is a standard and appropriate use of development tooling for a code refactoring task and does not present a security risk in this context.
Audit Metadata