prettier
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill guides the agent to process and format project source files, which serves as an ingestion point for untrusted external data.
- Ingestion points: Project source files including JavaScript, TypeScript, CSS, HTML, JSON, and Markdown as described in the documentation.
- Boundary markers: The instructions do not define specific delimiters or instructions to the agent to ignore potentially malicious embedded content within the files being formatted.
- Capability inventory: The skill uses shell commands (
npx prettier) to modify files across the entire repository. - Sanitization: No sanitization or validation of the content of the files is performed before the formatting commands are executed.
- [EXTERNAL_DOWNLOADS]: The skill references several external dependencies and tools including
prettier,prettier-plugin-tailwindcss,eslint-config-prettier,husky, andlint-staged. These are industry-standard packages from the well-known npm registry and are used according to established best practices.
Audit Metadata