migration Rapport d’audit.

Avertissements

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• SKILL.md declares dependencies on skills/review-migration and load-context, but those skills are not included in the submitted skill directory. The fallback instructions partially mitigate this, but the dependency is not self-contained.
• The skill assumes Rails, PostgreSQL, and a Heroku-like production environment but does not explicitly state these as scope/limitations for users on other stacks.
• Staging prerequisites require production-like data volume and shape, but SKILL.md does not describe how to create or maintain such a staging database.
• Hard gate thresholds (e.g., error rate < 0.1%, p99 < 500 ms) are presented as fixed values rather than as deltas from a measured production baseline.
• Low GitHub adoption signal
• Quality score needs review
• Permission surface needs review: shell or command execution, filesystem or document access
• GitHub adoption: 25 GitHub stars
• Stars/forks activity: 25 stars, 7 forks; issue activity unavailable in current metadata
• Dependency/runtime risk: command execution surface, network or browser surface

Méthode

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.