typescript-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified in the skill instructions or reference files. The skill focuses on promoting defensive programming and standard TypeScript best practices such as discriminated unions and branded types.
- [DATA_EXPOSURE]: The skill does not contain hardcoded credentials, API keys, or access to sensitive local file paths. It explicitly recommends treating external data (RPC payloads, environment variables, etc.) as
unknownand validating it at boundaries, which is a recognized security best practice to prevent logic errors and injection attacks. - [REMOTE_CODE_EXECUTION]: There are no patterns involving remote script execution, unauthorized package installations, or dynamic code execution from untrusted sources. Code examples utilize the well-known
zodlibrary for runtime schema validation, which is a standard industry practice.
Audit Metadata