setup-ts-deep-modules
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
dependency-cruiserpackage using standard package managers (npm, pnpm, yarn, or bun). This utility is a well-known and widely used tool for architectural linting in the JavaScript and TypeScript ecosystems. - [COMMAND_EXECUTION]: The skill executes shell commands to install dependencies, run linting checks, and manage project files. These operations, such as adding scripts to
package.jsonand runningdepcruise, are consistent with the skill's stated purpose of setting up a development environment. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the local repository, including lock files (
pnpm-lock.yaml,yarn.lock,bun.lockb) and existing configuration files (.dependency-cruiser.*). This information is used solely to determine the appropriate environment settings and does not influence the agent's logic in an exploitable way. The skill also instructs the agent to consult another skill ('codebase-design') for vocabulary, which is a standard method for maintaining consistency across agent tasks.
Audit Metadata