skills/bsene/skills/rescript/Gen Agent Trust Hub

rescript

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends standard ReScript ecosystem tools such as npx create-rescript-app for initialization and npm install for official packages like rescript, @rescript/core, and @rescript/react. It also references well-known testing libraries like @glennsl/rescript-jest and rescript-test.
  • [COMMAND_EXECUTION]: The instructions detail the use of the official rescript CLI for core development tasks including building, watching files for changes, and formatting code. It also includes instructions for running migration tools like npx rescript-tools migrate-all when upgrading from older versions.
  • [INDIRECT_PROMPT_INJECTION]: As a coding and debugging assistant, the skill is designed to ingest and analyze user-provided source code (.res/.resi) and compiler error messages, which is an inherent part of its functionality.
  • Ingestion points: User-pasted ReScript code and terminal output from the compiler.
  • Boundary markers: None explicitly defined in the instructions for isolating user-provided content.
  • Capability inventory: The skill describes interaction with build systems and package managers (npm, npx, rescript) which involve command-line execution.
  • Sanitization: No specific sanitization measures are described for user-supplied code snippets.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 05:12 PM