typescript-clean-code
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate educational and workflow tool for software engineering best practices. The instructions focus on grounding the AI in specific 'Clean Code' principles and following multi-step processes for code analysis and professional communication.
- [INDIRECT_PROMPT_INJECTION]: The skill inherently possesses an indirect prompt injection surface as its primary function is to ingest and analyze external code (PRs, files, and diffs). While the skill lacks explicit sanitization instructions for this input, this is a characteristic of the intended code-review functionality. The risk is considered low and mitigated by standard model-level guardrails.
- [EXTERNAL_DOWNLOADS]: The skill references several well-known and trusted educational resources for coding practice, such as
katas.softwarecraftsmanship.org,codekata.pragprog.com, andcodingdojo.org. These references are used for educational purposes and do not involve remote code execution. - [COMMAND_EXECUTION]: The workflows include standard developer commands (e.g.,
npm test,git commit,git clone) as part of the step-by-step processes for bug fixing and refactoring. These are legitimate uses of tool capabilities within a coding-assistance context.
Audit Metadata