lint
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected in the skill instructions.
- [COMMAND_EXECUTION]: The skill executes shell commands using
npm runto perform linting tasks. These commands are limited to the scripts already defined by the user in the localpackage.jsonfile. - [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes untrusted project data (
package.json) and tool output. However, it is restricted to linting workflows and follows best practices by using the project's own defined scripts rather than arbitrarynpxexecution.
Audit Metadata