typescript-docs

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's instructions, examples, and reference files are consistent with professional development workflows. All external links and package references target well-known repositories or official documentation sites. The presence of redundant text in the examples appears to be a generation artifact rather than a security concern.
  • [INDIRECT_PROMPT_INJECTION]: The skill naturally ingests source code for the purpose of documentation generation, which creates a standard attack surface for indirect prompt injection. This risk is inherent to the skill's primary function and is mitigated by the application of documentation validation tools.
  • Ingestion points: Reads TypeScript source files (.ts) and markdown documentation files via the agent's file system tools.
  • Boundary markers: The skill utilizes standard JSDoc tag structures to delimit and categorize information extracted from the code.
  • Capability inventory: The skill uses Bash, Write, and Edit tools to configure documentation engines and generate output files.
  • Sanitization: The skill recommends the use of ESLint with eslint-plugin-jsdoc and TypeDoc's internal validation to maintain documentation integrity.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 09:09 PM
Security Audit — agent-trust-hub — typescript-docs