type-level-error-messages

Warn

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: MEDIUMSAFE
Full Analysis
  • [OBFUSCATION]: Use of Unicode Zero-Width Space (U+200B) characters.\n- Evidence: The file SKILL.md includes template literal strings ending with the invisible character (e.g., InvalidKey<S> = "...$/​").\n- Evidence: The skill documentation explicitly recommends appending the U+200B character as a 'brand' to make error messages structurally distinct from plain strings.\n- Analysis: While the technique is documented as a way to isolate TypeScript types and improve IDE tooltips, the inclusion of invisible characters in source code or documentation is a known obfuscation technique used to hide data or instructions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 24, 2026, 06:15 PM
Security Audit — agent-trust-hub — type-level-error-messages