migrate-skill

Warn

Audited by Gen Agent Trust Hub on Apr 14, 2026

Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to generate a shell script in the /tmp/ directory and execute it using bash. This script performs file system modifications, including recursive deletions (rm -rf) on paths derived from input arguments.
  • [COMMAND_EXECUTION]: The instructions explicitly guide the agent to use the temporary script in /tmp/ to 'bypass sandbox restrictions' that normally prevent the agent from modifying its own .claude/ configuration directory. This is a deliberate attempt to evade platform security boundaries.
  • [COMMAND_EXECUTION]: The workflow includes automated git push operations to synchronize changes with a remote repository. While part of the migration process, this involves outbound network activity.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 14, 2026, 09:36 PM