knip
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official Knip configuration schema hosted on
unpkg.com, a well-known CDN for public NPM packages. - [DYNAMIC_EXECUTION]: The utility script
scripts/list-plugins.mjsdynamically imports plugin definitions from the project's localknipinstallation to provide version-accurate configuration details. - [COMMAND_EXECUTION]: The workflow involves executing standard package manager commands (e.g.,
bun run knip) and local scripts provided with the skill to audit and enforce code quality standards. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted repository data such as
package.jsonand configuration files through its auditing scripts. The analysis is performed using static parsing (JSON/JSONC) and does not involve executing instructions contained within the analyzed content.
Audit Metadata