oxfmt

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides detailed documentation and workflow guidance for the Oxfmt tool, a legitimate high-performance formatter from the Oxc project. The instructions align with standard software development practices and official tool documentation.
  • [EXTERNAL_DOWNLOADS]: The skill references documentation and fetches configuration from well-known sources, including the oxc-project GitHub organization, oxc.rs, and viteplus.dev. These downloads are for official project resources and configuration schemas necessary for the tool's operation.
  • [INDIRECT_PROMPT_INJECTION]: As a code formatting helper, the skill naturally involves the agent reading and processing source code files (JavaScript, TypeScript, JSON, CSS, etc.). While this provides a theoretical attack surface for indirect prompt injection, no malicious patterns were detected, and this behavior is essential for the skill's primary function.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 11:13 AM