typescript-testing
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates on local source code and test files, which constitutes a standard ingestion surface for testing tools.
- Ingestion points: Local files within
ts/packages/andts/e2e-tests/directories as described inSKILL.mdandreferences/test-commands.md. - Boundary markers: The skill does not explicitly define delimiters for separating instructions from the code being tested within the provided documentation.
- Capability inventory: Execution of shell commands via
pnpmfor building, linting, and running Vitest suites (subprocess execution) as detailed inreferences/test-commands.md. - Sanitization: No specific sanitization or validation of the code content is performed as the skill's primary purpose is to execute tests on the codebase.
- [COMMAND_EXECUTION]: The skill relies on standard
pnpmcommands for package management and testing workflows, such aspnpm test,pnpm build, andpnpm lint. These are appropriate for a TypeScript development environment and project structure. - [EXTERNAL_DOWNLOADS]: References specific versions of the
effectecosystem libraries (effect@4.0.0-rc.112,@effect/vitest@4.0.0-rc.112). These are standard, well-known libraries in the functional TypeScript community, and their usage is consistent with the skill's stated purpose of providing testing guidance for specific library versions.
Audit Metadata