typescript
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a reference for JavaScript and TypeScript development best practices. No malicious code, obfuscation, or persistence mechanisms were found. All external links point to reputable documentation and educational resources such as Microsoft's TypeScript documentation, MDN, and Zod documentation.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted JavaScript and TypeScript source code provided by users as defined in the triggers in SKILL.md (Ingestion point). It does not define explicit boundary markers or delimiters to separate instructions from the analyzed code (Boundary markers). While the skill defines instructional rules, the agent environment utilizing them possesses tools for file and system access (Capability inventory). No specific sanitization or filtering is implemented for the code inputs (Sanitization). The risk is considered minimal and inherent to the primary purpose of a code review assistant.
Audit Metadata