typescript-code-doctor

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local developer tools and git commands to perform analysis.
  • scripts/run_external_tools.py invokes tsc, eslint, biome, prettier, madge, knip, and package manager audit/test commands (npm, pnpm, yarn).
  • scripts/analyze_diff.py uses git diff, git rev-parse, and git merge-base to determine which lines of code have changed.
  • scripts/run_external_tools.py includes a --run-coverage option which explicitly executes the project's test suite to gather coverage data; this is clearly documented as code execution in SKILL.md.
  • [SAFE]: The skill is self-contained and does not require external dependencies or internet access for its core functions. It follows best practices for secret detection and security auditing without exhibiting malicious behaviors such as data exfiltration or persistence.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 01:20 PM