setup-pre-commit

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs standard development dependencies including husky, lint-staged, and prettier via the project's package manager. These are well-known tools from the official npm registry used for code quality management.
  • [COMMAND_EXECUTION]: The skill uses shell commands to initialize Husky (npx husky init), run linting tools, and commit configuration changes to the repository. These operations are limited to the skill's primary purpose of repository configuration.
  • [INDIRECT_PROMPT_INJECTION]: The skill reads local project metadata to customize the pre-commit hooks.
  • Ingestion points: Reads package.json and lock files to detect the package manager and available scripts.
  • Boundary markers: Absent.
  • Capability inventory: Executes package installation, Husky initialization, and git commits.
  • Sanitization: The skill performs existence checks for specific script names (test, typecheck) before referencing them, providing a basic level of validation against unexpected configurations.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 11:17 AM
Security Audit — agent-trust-hub — setup-pre-commit