setup-ts-deep-modules
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
dependency-cruiserpackage from standard registries using npm, pnpm, yarn, or bun. This is a well-known development tool for architectural analysis. - [COMMAND_EXECUTION]: The skill executes shell commands to detect the environment (checking for lock files), install dependencies, and run verification linting. It also modifies
package.jsonto add linting scripts. These operations are standard for development environment configuration. - [INDIRECT_PROMPT_INJECTION]: The skill processes existing repository files to adapt its configuration. This represents a standard surface for configuration-based automation.
- Ingestion points: Reads
package.json, lock files, and existing.dependency-cruiser.*configuration files from the local filesystem. - Boundary markers: None identified.
- Capability inventory: File system read/write, package installation, and execution of shell commands through the package manager.
- Sanitization: None identified, as the skill operates on structured configuration files in a development context.
Audit Metadata