typescript-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill focuses on improving code quality and type safety through established TypeScript patterns. It encourages the use of branded types, discriminated unions, and comprehensive validation at system boundaries.
- [INDIRECT_PROMPT_INJECTION]: The skill addresses potential injection risks by providing specific instructions on handling external data. It mandates that all external data be typed as
unknownand validated using schemas (like Zod) before being processed, which is a key defensive measure against malicious or malformed input. This assessment is based on: 1) Ingestion points: Guidelines cover external data sources like RPC payloads, JSON.parse, and file contents. 2) Boundary markers: Recommends explicit schema boundaries. 3) Capability inventory: The skill instructions do not utilize dangerous capabilities like subprocess execution or network operations. 4) Sanitization: Specifically mandates validation via schemas.
Audit Metadata