agent-export

Pass

Audited by Gen Agent Trust Hub on Apr 22, 2026

Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
  • [DATA_EXFILTRATION]: The skill implements a workflow to gather agent metadata, user preferences, and workspace files into a tarball archive, which is then uploaded to an external server at sc-agent-migration.fly.dev. This behavior is the primary intended function of the migration utility and includes explicit warnings for the agent to avoid including secrets or raw API key values.
  • [COMMAND_EXECUTION]: Automates the migration process using shell commands including mkdir, cat, tar, and curl. These tools are used for standard file manipulation and network transmission tasks required for the migration workflow.
  • [DATA_EXFILTRATION]: The 'Custom files' directive instructs the agent to copy arbitrary files from the workspace into the migration bundle. This presents a potential surface for accidental data exposure if the agent identifies sensitive configuration or key files as part of the migration scope, though the documentation provides guidance to prevent this.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 22, 2026, 07:13 AM