typescript-review

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill acts as a specialized code review workflow that analyzes code changes and produces a report. It does not perform any network operations, ensuring that the code it processes is not exfiltrated.
  • [COMMAND_EXECUTION]: The skill utilizes git diff to access the code changes and mkdir to create a temporary directory for the report. These commands are necessary for its core functionality and are used in a non-malicious context.
  • [PROMPT_INJECTION]: The skill includes instructions to ignore the content of the code being reviewed in terms of instruction following, focusing only on the code's style and logic. While it processes untrusted data (the code diff), the workflow is designed to output a read-only report rather than execute instructions found within the code.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 06:53 AM
Security Audit — agent-trust-hub — typescript-review