effect-ts-extensions
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized commands were found. The instructions focus entirely on legitimate software development practices for the Effect ecosystem.
- [EXTERNAL_DOWNLOADS]: The skill mentions the @effect/language-service Node.js package, which is a standard development tool for enhancing TypeScript diagnostics in Effect-based projects.
- [PROMPT_INJECTION]: The skill encourages strong security boundaries by instructing the agent to decode all untrusted or external data using schemas (e.g., Schema.decodeUnknown) before treatment as domain data, which is a primary defense against indirect injection attacks.
- [DATA_EXFILTRATION]: The instructions explicitly forbid logging sensitive information such as secrets, tokens, or personal data and recommend using the framework's Config.redacted feature for sensitive values.
Audit Metadata