elm-to-fsharp-guru

Pass

Audited by Gen Agent Trust Hub on Mar 1, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute local F# scripts using dotnet fsi to automate migration tasks like module analysis and test extraction. This execution is confined to scripts provided within the skill package and is consistent with the primary functionality of the skill.
  • [EXTERNAL_DOWNLOADS]: Automation scripts like analyze-elm-module.fsx and verify-compatibility.fsx download standard, well-known libraries such as Spectre.Console and System.Text.Json from the NuGet package registry.
  • [PROMPT_INJECTION]: The extract-elm-tests.fsx script parses Elm documentation comments to generate BDD scenarios in .feature files. This creates a potential surface for indirect prompt injection if the source Elm file contains adversarial content.
  • Ingestion points: Elm source files processed by extract-elm-tests.fsx and analyze-elm-module.fsx.
  • Boundary markers: The generated feature files do not use explicit boundary markers or instructions to ignore embedded prompts in the extracted documentation strings.
  • Capability inventory: The skill utilizes the .NET SDK for script execution and has read/write access to the local file system.
  • Sanitization: The extraction process relies on regular expressions but does not perform comprehensive sanitization of the extracted documentation text before outputting it.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 1, 2026, 07:45 PM