typescript

Pass

Audited by Gen Agent Trust Hub on Aug 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill functions as an extensive educational resource for TypeScript development. It covers core principles such as strict type safety, modular architecture, and modern asynchronous patterns without introducing malicious instructions or security vulnerabilities.
  • [COMMAND_EXECUTION]: The documentation includes standard development commands like npm install, npx tsc, and npm run build. These are contextually appropriate for a developer-oriented skill and do not contain hidden or malicious payloads.
  • [DATA_EXFILTRATION]: Code samples demonstrate how to build API clients using the fetch API. The examples use relative paths (e.g., /api/users) and standard patterns, showing no intent to exfiltrate sensitive data to external or unauthorized domains.
  • [REMOTE_CODE_EXECUTION]: The skill recommends the use of zod for runtime schema validation, which is a proactive security measure to ensure external data conforms to expected types before processing. It does not utilize any patterns for downloading and executing untrusted remote code.
  • [PROMPT_INJECTION]: The skill instructions are focused on coding standards and do not contain language intended to override agent behavior, bypass safety filters, or extract system prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 7, 2026, 10:56 PM
Security Audit — agent-trust-hub — typescript