typescript-ops

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The scripts/check-typescript-facts.py script performs network requests to the official npm registry (registry.npmjs.org) to verify that the versions documented in the skill match the latest published majors. This is a legitimate documentation maintenance task using a well-known service.
  • [COMMAND_EXECUTION]: The skill includes a shell script (tests/run.sh) used for structural integrity testing and fact-checking. It executes standard system utilities such as grep, sed, and mktemp, as well as the skill's own Python verification script. These actions are scoped to the skill's repository and intended for development/CI purposes.
  • [INDIRECT_PROMPT_INJECTION]: The fact-checking script ingests local markdown documentation and JSON metadata, and fetches external package metadata. While this represents a data ingestion surface, the script only performs specific version comparisons and does not interpret the data as instructions for the agent, presenting minimal risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 06:51 PM