typegpu
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate technical resource for WebGPU developers using the TypeGPU library. It includes extensive documentation on shaders, pipelines, and resource ownership.
- [COMMAND_EXECUTION]: The skill includes a local utility script,
scripts/audit.mjs, designed to perform static analysis on a codebase. The script uses standard Node.js modules (fs,path) to read local files and identify performance or configuration issues. It operates entirely locally and does not perform network operations. - [DATA_EXPOSURE]: The provided audit script performs read-only operations on project source files. It implements safety measures by explicitly skipping sensitive or irrelevant directories such as
.git,node_modules, and.env, preventing accidental exposure of sensitive metadata. - [EXTERNAL_DOWNLOADS]: References to external resources and package installations (
npm install typegpu,@webgpu/types, etc.) target well-known technology organizations and official documentation sites (e.g., MDN, GitHub). These references are neutral and standard for modern web development workflows.
Audit Metadata