migration-page-generator

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is a coherent instruction-only content-generation skill; the only notable behavior is a limited, disclosed read of local project context files if present.

This skill appears safe for normal use as an instruction-only page-generation helper. Before installing, note that it may read `.claude/project-context.md` or `.cursor/project-context.md` if present, so those files should not contain secrets or sensitive details you do not want used in generated marketing content.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI06: Memory and Context Poisoning
Low
What this means

Information in local project context files could be incorporated into the migration guide content or shape recommendations.

Why it was flagged

The skill uses local project-context files as input. This is purpose-aligned and narrowly scoped, but users should know that local project context may influence generated output.

Skill content
If `.claude/project-context.md` or `.cursor/project-context.md` exists, read it for product, migration capabilities, and source platforms.
Recommendation

Keep project-context files accurate and avoid placing sensitive information there unless you are comfortable with the agent using it for content generation.