typescript-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and examples for TypeScript coding standards aimed at improving code robustness and type safety. It uses a restrictive frontmatter configuration that disables model invocation, limiting the agent's capability to only reading the instructions.
- [INDIRECT_PROMPT_INJECTION]: While the skill is intended to be applied when the agent reads or edits external TypeScript files, it specifically instructs the agent to implement security-positive patterns such as boundary validation, using 'unknown' for external data, and using schema-based validation (e.g., Zod). These practices are designed to prevent vulnerabilities in the software being developed.
- [COMMAND_EXECUTION]: There are no shell commands, dynamic context injections, or subprocess calls present in the skill instructions or reference files.
Audit Metadata