lint-config
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill instructs the agent to read and process JavaScript source files for linting and formatting. This creates an indirect prompt injection attack surface where malicious instructions hidden in the project's code could potentially influence the agent's behavior.\n
- Ingestion points: The agent is instructed to read
eslint.config.js,package.json, and project source files (e.g.,src/**/*.js).\n - Boundary markers: None specified in the instructions to delimit code from instructions.\n
- Capability inventory: The skill involves file reading and executing linting commands via
npxandnpm.\n - Sanitization: No explicit sanitization of the source code content is mentioned before the agent processes it.\n- [EXTERNAL_DOWNLOADS]: The skill references several standard JavaScript packages to be installed via npm. These include well-known tools like
eslint,prettier, and various official or community-accepted plugins (eslint-plugin-security,eslint-plugin-sonarjs, etc.).\n- [COMMAND_EXECUTION]: The documentation provides examples of standard CLI usage for JavaScript development, including dependency installation (npm install) and project linting (npx eslint,npm run lint).
Audit Metadata