modernize-move
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill architecture prioritizes safety through a tiered transformation model and automated testing checkpoints. No malicious patterns, data exfiltration, or persistence mechanisms were detected.
- [COMMAND_EXECUTION]: Employs the
Bashtool to executeaptos move testandaptos move test --coverage. These are standard, well-known commands used to verify the correctness of the Move smart contracts being modernized and do not involve untrusted remote sources. - [PROMPT_INJECTION]: The skill processes untrusted Move source code, presenting a surface for indirect prompt injection. (1) Ingestion points: The skill uses the
Readtool to ingest.movefiles from thesources/directory. (2) Boundary markers: No specific delimiters are implemented during code ingestion. (3) Capability inventory: The skill possesses theWrite,Edit, andBashtools. (4) Sanitization: Transformations are constrained by predefined rules inreferences/detection-rules.mdand are validated against the project's existing test suite.
Audit Metadata