migrate-skill
Warn
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to generate a shell script in the
/tmp/directory and execute it usingbash. This script performs file system modifications, including recursive deletions (rm -rf) on paths derived from input arguments. - [COMMAND_EXECUTION]: The instructions explicitly guide the agent to use the temporary script in
/tmp/to 'bypass sandbox restrictions' that normally prevent the agent from modifying its own.claude/configuration directory. This is a deliberate attempt to evade platform security boundaries. - [COMMAND_EXECUTION]: The workflow includes automated
git pushoperations to synchronize changes with a remote repository. While part of the migration process, this involves outbound network activity.
Audit Metadata