validate-code

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands via npm run based on scripts found in the local package.json. It specifically attempts to run lint-fix, lint:fix, lint, and test. While this relies on scripts defined in a local file, it is the intended primary functionality for a code validation tool.
  • [COMMAND_EXECUTION]: Assessment of indirect command execution surface: 1. Ingestion points: The skill reads package.json from the file system to determine which scripts to execute. 2. Boundary markers: Absent; the skill does not use specific delimiters to isolate external file content. 3. Capability inventory: Executes arbitrary shell commands through the npm CLI. 4. Sanitization: None; the skill executes scripts exactly as they are defined in the project configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 12:20 PM
Security Audit — agent-trust-hub — validate-code