narrow-react-prop-types
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill logic is focused on improving code quality by tightening React prop types based on static analysis of call sites. No malicious intent or suspicious patterns were detected.
- [COMMAND_EXECUTION]: The instructions and workflow file invoke standard development tools such as
git,gh,bun, andjq. For example, it usesbun --bun run typecheckto validate changes andgh pr createto manage pull requests. - [EXTERNAL_DOWNLOADS]: The workflow downloads the
@humanlayer/clipackage from the public NPM registry. This is a recognized vendor resource from the skill author,humanlayer. - [PROMPT_INJECTION]: The workflow contains a potential prompt injection surface by interpolating user-provided inputs (
target_path) and PR comments into the prompt. Access to these inputs is gated by GitHub repository permissions, requiring collaborator status to trigger the workflow.
Audit Metadata