validate-code

Pass

Audited by Gen Agent Trust Hub on Aug 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local shell commands such as npm run lint-fix, npm run lint, and npm test. These commands are standard for Node.js development environments and are used to validate code quality as described in the skill's purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from package.json and test/lint runner outputs. While these are external inputs, the skill uses them for their intended purpose of identifying available scripts and reporting errors. Standard risks associated with running scripts in untrusted repositories apply, but the skill itself does not introduce new vulnerabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 16, 2026, 02:18 AM
Security Audit — agent-trust-hub — validate-code