skills/jeremylongshore/claude-code-plugins-plus-skills/customerio-upgrade-migration/Gen Agent Trust Hub
customerio-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill manages SDK updates using standard package managers to fetch official libraries from trusted registries.\n
- Evidence: Includes instructions to run
npm install @customerio/track@latestandpip install --upgrade customerioto move from legacy to current SDK versions.\n - Context: All downloads target official packages for the Customer.io service, which is a well-known industry provider.\n- [COMMAND_EXECUTION]: Local shell scripts are provided to help developers assess their environment and verify migration success.\n
- Evidence: The implementation guide includes assessment and verification scripts (e.g.,
assess-customerio.sh) that usenpm list,pip show, andgrep.\n - Context: These tools are used for project-local inspection and are consistent with standard development workflows.\n- [SAFE]: Credential management is handled securely without any hardcoded secrets.\n
- Evidence: Reference code throughout
implementation-guide.mdandimplementation.mduses environment variables such asprocess.env.CUSTOMERIO_SITE_IDandos.environ["CUSTOMERIO_TRACK_API_KEY"].\n - Context: The skill correctly encourages the use of secure environment configuration over hardcoded API keys.
Audit Metadata