skills/hairyf/skills/antfu/Gen Agent Trust Hub

antfu

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes @antfu/ni for dependency management and nlx (npx) to execute development tools like fast-npm-meta for efficient package metadata lookups.
  • [EXTERNAL_DOWNLOADS]: Configures GitHub Actions to utilize reusable workflows from the sxzz/workflows repository for automated linting fixes, unit testing, and package releases.
  • [DYNAMIC_EXECUTION]: Includes a configuration script (alias.ts) for monorepos that dynamically reads from and writes to the tsconfig.alias.json file using Node.js filesystem APIs to synchronize path aliases.
  • [PERSISTENCE]: Sets up Git hooks through simple-git-hooks to ensure automated code quality checks by running eslint --fix during the pre-commit stage.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides templates for processing project-specific data through build and linting pipelines.
  • Ingestion points: Reads project configuration files (e.g., tsconfig.alias.json) and project source code.
  • Boundary markers: Standard application boundaries for build and linting tools.
  • Capability inventory: Includes filesystem read/write access via utility scripts and automated command execution through CI/CD workflows and Git hooks.
  • Sanitization: Standard JSON parsing and stringification are used for configuration management.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:06 PM