schema-dts

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and installs TypeScript typings and generator tools from the official repositories and registries associated with the project maintainers.
  • Evidence: Recommends installing schema-dts, schema-dts-gen, and schema-dts-lib via package managers like bun as seen in references/setup-core.md and references/generator-migration.md.
  • Evidence: Fetches Schema.org ontologies from schema.org domains for custom type generation.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and generate structured data based on user input, creating a standard attack surface where malicious instructions could be embedded in external schema data.
  • Ingestion points: Processes user-provided Schema.org properties and JSON-LD object definitions across all reference files.
  • Boundary markers: Instructs the agent to utilize specific TypeScript wrappers like WithContext or Graph to define document roots.
  • Capability inventory: Provides command-line examples for package management and code generation, and produces TypeScript code for structured data objects.
  • Sanitization: Explicitly provides and recommends a safeJsonLd utility function in references/patterns-frameworks.md to escape characters that could lead to XSS during script injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 11:13 AM