schema-dts
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and installs TypeScript typings and generator tools from the official repositories and registries associated with the project maintainers.
- Evidence: Recommends installing
schema-dts,schema-dts-gen, andschema-dts-libvia package managers likebunas seen inreferences/setup-core.mdandreferences/generator-migration.md. - Evidence: Fetches Schema.org ontologies from
schema.orgdomains for custom type generation. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and generate structured data based on user input, creating a standard attack surface where malicious instructions could be embedded in external schema data.
- Ingestion points: Processes user-provided Schema.org properties and JSON-LD object definitions across all reference files.
- Boundary markers: Instructs the agent to utilize specific TypeScript wrappers like
WithContextorGraphto define document roots. - Capability inventory: Provides command-line examples for package management and code generation, and produces TypeScript code for structured data objects.
- Sanitization: Explicitly provides and recommends a
safeJsonLdutility function inreferences/patterns-frameworks.mdto escape characters that could lead to XSS during script injection.
Audit Metadata