migrate-to-vinext

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • Project Scanning and Configuration Management: The skill performs a migration by analyzing local files such as package.json and next.config.js to detect project settings. This ingestion of local file data is used to generate new configurations and update dependencies. The capability to execute shell commands (like npm install and npx vinext) based on these findings is a standard pattern for migration tools. The skill structures this into specific phases to maintain procedural control. Ingestion points include project configuration files, while capabilities include file system modifications and CLI executions.
  • Automated Command Execution: To streamline the migration, the skill utilizes npx and package manager scripts to run tools such as vinext and vite. These executions are intended to handle compatibility checks and build processes. The use of vendor-aligned utilities like @vinext/cloudflare and wrangler is consistent with the goal of deploying to serverless environments.
  • Dependency Integration: The migration involves adding several ecosystem packages, including nitro, @vitejs/plugin-rsc, and various Vite plugins. These dependencies are standard components of the modern web development stack and the vinext framework, facilitating features like React Server Components and multi-platform deployment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 12:41 PM
Security Audit — agent-trust-hub — migrate-to-vinext