oxfmt
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides detailed documentation and workflow guidance for the Oxfmt tool, a legitimate high-performance formatter from the Oxc project. The instructions align with standard software development practices and official tool documentation.
- [EXTERNAL_DOWNLOADS]: The skill references documentation and fetches configuration from well-known sources, including the
oxc-projectGitHub organization,oxc.rs, andviteplus.dev. These downloads are for official project resources and configuration schemas necessary for the tool's operation. - [INDIRECT_PROMPT_INJECTION]: As a code formatting helper, the skill naturally involves the agent reading and processing source code files (JavaScript, TypeScript, JSON, CSS, etc.). While this provides a theoretical attack surface for indirect prompt injection, no malicious patterns were detected, and this behavior is essential for the skill's primary function.
Audit Metadata