validate-code
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands such as
npm run lint-fix,npm run lint, andnpm test. These commands are standard for Node.js development environments and are used to validate code quality as described in the skill's purpose. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from
package.jsonand test/lint runner outputs. While these are external inputs, the skill uses them for their intended purpose of identifying available scripts and reporting errors. Standard risks associated with running scripts in untrusted repositories apply, but the skill itself does not introduce new vulnerabilities.
Audit Metadata