typescript-docstrings
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, exfiltration attempts, or unauthorized command executions were detected. The skill uses standard TypeScript documentation conventions and tools.
- [PROMPT_INJECTION]: Analysis for indirect prompt injection (Category 8) identifies that the skill processes untrusted source code as part of its documentation workflow, but the risk is negligible as it only generates non-executable comments.
- Ingestion points: The skill processes TypeScript files within the repository context as described in SKILL.md and references/docstrings.md.
- Boundary markers: Absent; the instructions do not define specific delimiters for separating untrusted user code from the agent prompt.
- Capability inventory: References to extraction tools such as typedoc, api-extractor, and tsc are provided for developer verification and do not represent autonomous or dangerous execution capabilities.
- Sanitization: There is no logic present to sanitize or validate the content of processed source code files.
Audit Metadata