setup-ts-deep-modules
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes package manager commands such as npm, pnpm, yarn, or bun to install the dependency-cruiser tool as a devDependency and create validation scripts.
- [EXTERNAL_DOWNLOADS]: Installs the 'dependency-cruiser' utility from the official NPM registry to perform architectural analysis and linting.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes existing project configuration and workspace layout to adapt its enforcement rules.
- Ingestion points: Reads existing
.dependency-cruiser.*configuration files and workspace structure (e.g.,pnpm-lock.yaml,package.json) in the environment detection step. - Boundary markers: Does not utilize explicit delimiters when reading or merging existing configuration file content.
- Capability inventory: The skill can modify project files, write new configurations, and execute shell commands through the system's package manager.
- Sanitization: The skill includes instructions to escape regular-expression characters in detected package root paths to prevent configuration errors or injection into the generated regex patterns.
Audit Metadata