fix-knip-unused-exports
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill performs legitimate code maintenance tasks using standard local development tools. No evidence of malicious behavior, data exfiltration, or unauthorized access was found.
- [COMMAND_EXECUTION]: The instructions involve executing project-standard commands including
npm run knip,rg,npm run test, andnpm run lint. These are used for their intended purposes within the project scope. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it ingests untrusted data from command outputs and repository files. Ingestion points:
npm run knipoutput andrgsearch results. Capability inventory: file system write access for creating/modifying source files andpackage.json, and execution ofnpmandrgshell commands. Boundary markers: absent. Sanitization: absent.
Audit Metadata