ln-720-structure-migrator

Pass

Audited by Gen Agent Trust Hub on Mar 13, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by ingesting and processing untrusted data from the local file system to determine migration paths.
  • Ingestion points: Phase 1 (Analyze) in TRANSFORM mode scans the project structure, detects frameworks, and maps files (SKILL.md).
  • Boundary markers: The skill lacks explicit boundary markers or instructions to disregard potential commands embedded in the scanned file system metadata.
  • Capability inventory: The orchestrator delegates tasks to specialized workers that perform file system restructuring (ln-721), code generation (ln-722), seed data migration (ln-723), and artifact deletion (ln-724) (SKILL.md).
  • Sanitization: There is no evidence of sanitization or validation of the project structure data before it is used to parameterize worker delegations.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 13, 2026, 01:43 PM