migration 監査レポート.

警告

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• SKILL.md declares dependencies on skills/review-migration and load-context, but those skills are not included in the submitted skill directory. The fallback instructions partially mitigate this, but the dependency is not self-contained.
• The skill assumes Rails, PostgreSQL, and a Heroku-like production environment but does not explicitly state these as scope/limitations for users on other stacks.
• Staging prerequisites require production-like data volume and shape, but SKILL.md does not describe how to create or maintain such a staging database.
• Hard gate thresholds (e.g., error rate < 0.1%, p99 < 500 ms) are presented as fixed values rather than as deltas from a measured production baseline.
• Low GitHub adoption signal
• Quality score needs review
• Permission surface needs review: shell or command execution, filesystem or document access
• GitHub adoption: 25 GitHub stars
• Stars/forks activity: 25 stars, 7 forks; issue activity unavailable in current metadata
• Dependency/runtime risk: command execution surface, network or browser surface

方法

このレポートは公開メタデータ、AI レビュー、リポジトリの鮮度、インストール準備、OpenAgentSkill イベント、品質スコア、信頼チェック、Agent セーフティゲートを統合します。完全なソースコード監査ではありません。