gpc-migrate-fastlane

Pass

Audited by Gen Agent Trust Hub on May 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is designed to assist users in migrating between two legitimate developer tools. It recommends the installation of the @gpc-cli/cli package, which is the primary tool for the migration workflow.
  • [SAFE]: The detection script (scripts/detect_gpc.mjs) uses standard Node.js practices to check for the CLI's installation and configuration status. It executes only specific, hardcoded commands and does not process untrusted input.
  • [SAFE]: The instructions for handling service account keys (e.g., setting GPC_SERVICE_ACCOUNT) follow standard DevOps practices for managing secrets in deployment pipelines.
  • [SAFE]: Local file access (reading Fastfile, Appfile, and metadata) is performed to facilitate the mapping and migration process, which is the core function of the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
May 6, 2026, 03:57 AM