angular-modernization

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands for Angular migrations using the Angular CLI via npx ng generate, as well as project-level scripts for linting (npm run lint:fix) and testing (npm run test). These operations are consistent with the skill's purpose of code modernization and use standard developer tooling.
  • [EXTERNAL_DOWNLOADS]: The skill links to official Angular documentation (angular.dev) and Bitwarden's internal architecture guidelines (contributing.bitwarden.com). These references provide necessary context for modernization patterns and architecture decision records (ADRs).
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted source code from the local project, which presents a vulnerability surface for indirect prompt injection.
  • Ingestion points: The agent uses Read and Glob tools to ingest Angular component, directive, and template files during the modernization process.
  • Boundary markers: The instructions do not define specific delimiters or "ignore" markers for handling instructions that might be embedded in the code comments of the files being processed.
  • Capability inventory: The skill utilizes Write access to modify project files and Bash access to execute CLI commands (npx ng, npm run).
  • Sanitization: No specific sanitization or escaping of the input source code is defined before the agent performs modernization transformations.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 04:24 AM
Security Audit — agent-trust-hub — angular-modernization