tsdoc
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions focus on standardizing TypeScript doc-comments and do not attempt to override safety guidelines or bypass agent constraints. All external references are to well-known developer resources such as Microsoft's TSDoc documentation and the Biome project.- [SAFE]: No sensitive data exposure, persistence mechanisms, or unauthorized privilege escalation commands were found in the skill or its reference files.- [INDIRECT_PROMPT_INJECTION]: The skill describes a vulnerability surface as it processes user-provided TypeScript source code to generate documentation.
- Ingestion points: Reads user-provided TypeScript files to determine documentation needs (mentioned in SKILL.md and cursor/copilot extensions).
- Boundary markers: Explicitly defines public vs private symbols and identifies machine-generated code to skip.
- Capability inventory: No subprocess calls or network operations are defined in the skill itself; it acts as an instructional guide for the agent's behavior.
- Sanitization: None observed; the skill relies on the agent's interpretation of standard TSDoc tags.
Audit Metadata