howto-code-in-typescript
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a coding standard documentation that promotes security best practices. It includes defensive coding patterns for handling untrusted data, such as safe object merging to prevent prototype pollution and regular expression guidelines to avoid Denial of Service (ReDoS) attacks.
- [EXTERNAL_DOWNLOADS]: The skill and its reference files document the use of established third-party libraries including
mathjs,neverthrow,type-fest, andtypebox. These are well-known, reputable packages in the TypeScript ecosystem used for precision mathematics, functional error handling, and runtime schema validation. - [INDIRECT_PROMPT_INJECTION]: As a style guide used during code generation and review, the agent will process user-provided TypeScript code. While this represents a potential ingestion surface for indirect instructions, the skill specifically instructs the agent to apply strict validation and defensive patterns (e.g., TypeBox schemas, prototype pollution guards) which serves to mitigate typical injection risks in generated code.
Audit Metadata