do-lean-ts-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Instructional content and code patterns. The skill consists entirely of markdown documentation and TypeScript code snippets intended to guide developers in building zero-dependency tools. No malicious instructions or hidden behaviors were detected.
- [SAFE]: Security best practices. The object merging pattern (defu) in references/data-utils.md includes explicit protections against prototype pollution by filtering proto and constructor properties during recursion.
- [SAFE]: Minimal attack surface. The skill advocates for a zero-dependency architecture, utilizing native Node.js modules and browser-standard APIs instead of third-party dependencies, which reduces potential supply chain risks.
- [SAFE]: Standard system usage. Code examples for file caching and CLI argument parsing follow standard conventions, such as using os.tmpdir() for temporary storage and node:util.parseArgs for safe command-line input handling.
Audit Metadata