project-coding-standards
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes instructions for executing repository-specific development scripts using pnpm, such as
pnpm run preflight,pnpm typecheck, andpnpm lint. These are standard tools for linting, typechecking, and running unit/E2E tests in a Node.js development environment. - [DYNAMIC_EXECUTION]: The skill explicitly advises against using
eval()for parsing data or JSON, recommending safer alternatives likeJSON.parse(). This demonstrates a commitment to security best practices regarding dynamic code execution. - [DATA_EXPOSURE]: Guidelines are provided for handling remote I/O, instructing developers to scope downloads from Cloud Storage (GCS) to specific prefixes and to use local caching. This minimizes unnecessary network traffic and reduces the footprint of data retrieved from remote stores.
Audit Metadata