ESLint Auto-Fix Pipeline
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, such as obfuscation, credential harvesting, or unauthorized network activity, were identified in the skill content.
- [COMMAND_EXECUTION]: The skill executes the ESLint engine via the Node.js API (
new ESLint({ fix: true })) to analyze and fix code style violations. This operation is the primary intended function of the skill and follows standard development practices. - [EXTERNAL_DOWNLOADS]: The skill utilizes well-known and trusted packages from the npm registry, including
eslint-config-airbnb,eslint-plugin-react, andeslint-config-prettier. These are industry standards for code quality and formatting and do not represent a security risk. - [PROMPT_INJECTION]: The skill operates on codebase files as external inputs, creating a surface for indirect prompt injection. However, the skill documentation contains no instructions that attempt to override agent behavior, bypass safety guidelines, or extract system prompts.
Audit Metadata