javascript-pro

Pass

Audited by Gen Agent Trust Hub on Apr 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's instructions and reference materials follow professional software development standards. No malicious code, obfuscation, or adversarial patterns were detected.- [COMMAND_EXECUTION]: The reference documentation (references/node-essentials.md) includes examples of using the Node.js child_process module (exec, spawn) for legitimate development tasks like running shell commands and spawning scripts. These are standard tools in a backend development context.- [DATA_EXFILTRATION]: Documents the use of fs/promises for file operations and process.env for configuration management. These practices are standard for Node.js development and do not demonstrate any intent to access or exfiltrate sensitive data such as credentials or system keys.- [PROMPT_INJECTION]: The skill defines a surface for potential indirect prompt injection by instructing the agent to analyze external project files (e.g., package.json). This is a functional requirement for a developer assistant and is mitigated by the skill's emphasis on comprehensive testing and modular code architecture.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 15, 2026, 06:57 AM