angular-modernization
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands for Angular migrations using the Angular CLI via
npx ng generate, as well as project-level scripts for linting (npm run lint:fix) and testing (npm run test). These operations are consistent with the skill's purpose of code modernization and use standard developer tooling. - [EXTERNAL_DOWNLOADS]: The skill links to official Angular documentation (
angular.dev) and Bitwarden's internal architecture guidelines (contributing.bitwarden.com). These references provide necessary context for modernization patterns and architecture decision records (ADRs). - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted source code from the local project, which presents a vulnerability surface for indirect prompt injection.
- Ingestion points: The agent uses
ReadandGlobtools to ingest Angular component, directive, and template files during the modernization process. - Boundary markers: The instructions do not define specific delimiters or "ignore" markers for handling instructions that might be embedded in the code comments of the files being processed.
- Capability inventory: The skill utilizes
Writeaccess to modify project files andBashaccess to execute CLI commands (npx ng,npm run). - Sanitization: No specific sanitization or escaping of the input source code is defined before the agent performs modernization transformations.
Audit Metadata