typescript-testing

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill operates on local source code and test files, which constitutes a standard ingestion surface for testing tools.
  • Ingestion points: Local files within ts/packages/ and ts/e2e-tests/ directories as described in SKILL.md and references/test-commands.md.
  • Boundary markers: The skill does not explicitly define delimiters for separating instructions from the code being tested within the provided documentation.
  • Capability inventory: Execution of shell commands via pnpm for building, linting, and running Vitest suites (subprocess execution) as detailed in references/test-commands.md.
  • Sanitization: No specific sanitization or validation of the code content is performed as the skill's primary purpose is to execute tests on the codebase.
  • [COMMAND_EXECUTION]: The skill relies on standard pnpm commands for package management and testing workflows, such as pnpm test, pnpm build, and pnpm lint. These are appropriate for a TypeScript development environment and project structure.
  • [EXTERNAL_DOWNLOADS]: References specific versions of the effect ecosystem libraries (effect@4.0.0-rc.112, @effect/vitest@4.0.0-rc.112). These are standard, well-known libraries in the functional TypeScript community, and their usage is consistent with the skill's stated purpose of providing testing guidance for specific library versions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 08:31 PM
Security Audit — agent-trust-hub — typescript-testing