typescript-pro

Pass

Audited by Gen Agent Trust Hub on Mar 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to utilize standard TypeScript development tools, specifically the compiler (tsc --noEmit) and coverage analysis utilities (type-coverage), to validate type safety during the development workflow.
  • [EXTERNAL_DOWNLOADS]: Mentions the use of established community tools such as type-coverage and @typescript/analyze-trace for project auditing and performance monitoring.
  • [PROMPT_INJECTION]: As the skill is designed to analyze and implement TypeScript code based on local context, it processes project-specific data which serves as a potential surface for indirect prompt injection. However, the skill does not expose sensitive data or provide unsafe execution pathways for untrusted input.
  • [SAFE]: Architectural patterns and configuration examples provided, including branded types for domain modeling and strict compiler flags, align with industry best practices for robust software development.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 24, 2026, 01:36 AM