rescript
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends standard ReScript ecosystem tools such as
npx create-rescript-appfor initialization andnpm installfor official packages likerescript,@rescript/core, and@rescript/react. It also references well-known testing libraries like@glennsl/rescript-jestandrescript-test. - [COMMAND_EXECUTION]: The instructions detail the use of the official
rescriptCLI for core development tasks including building, watching files for changes, and formatting code. It also includes instructions for running migration tools likenpx rescript-tools migrate-allwhen upgrading from older versions. - [INDIRECT_PROMPT_INJECTION]: As a coding and debugging assistant, the skill is designed to ingest and analyze user-provided source code (.res/.resi) and compiler error messages, which is an inherent part of its functionality.
- Ingestion points: User-pasted ReScript code and terminal output from the compiler.
- Boundary markers: None explicitly defined in the instructions for isolating user-provided content.
- Capability inventory: The skill describes interaction with build systems and package managers (
npm,npx,rescript) which involve command-line execution. - Sanitization: No specific sanitization measures are described for user-supplied code snippets.
Audit Metadata