lint-js
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a local repository script
./xwith thelint-jsargument. This is a common developer pattern for task orchestration within the Deno project ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes JavaScript and TypeScript source files and instructs the agent to fix errors based on the tool's output, creating a surface for indirect prompt injection from untrusted code.
- Ingestion points: Local JavaScript and TypeScript source files (via linter output).
- Boundary markers: None present in the instructions.
- Capability inventory: Executes shell commands via
Bash(./x lint-js). - Sanitization: None specified; behavior depends on the underlying linter's output processing.
Audit Metadata