typescript-ops
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/check-typescript-facts.pyscript performs network requests to the official npm registry (registry.npmjs.org) to verify that the versions documented in the skill match the latest published majors. This is a legitimate documentation maintenance task using a well-known service. - [COMMAND_EXECUTION]: The skill includes a shell script (
tests/run.sh) used for structural integrity testing and fact-checking. It executes standard system utilities such asgrep,sed, andmktemp, as well as the skill's own Python verification script. These actions are scoped to the skill's repository and intended for development/CI purposes. - [INDIRECT_PROMPT_INJECTION]: The fact-checking script ingests local markdown documentation and JSON metadata, and fetches external package metadata. While this represents a data ingestion surface, the script only performs specific version comparisons and does not interpret the data as instructions for the agent, presenting minimal risk.
Audit Metadata