biome
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides commands to install official packages from the npm registry, such as
@biomejs/biome,husky, andlint-staged. These are standard development dependencies. - [COMMAND_EXECUTION]: Documentation includes standard CLI commands for initializing and running the Biome tool (e.g.,
npx @biomejs/biome check). These commands are typical for the described functionality. - [SAFE]: External links point to official resources including the Biome documentation (biomejs.dev), their GitHub repository, and the VS Code Marketplace extension page. These are well-known and trusted services.
- [INDIRECT_PROMPT_INJECTION]: The skill documents an attack surface where Biome processes external source code and can modify files via the
--writeflag. This is the intended primary purpose of a formatter/linter and is handled with standard capabilities.
Audit Metadata