setup-ts-deep-modules
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted configuration files such as
tsconfig.json,package.json, and workspace settings to identify module boundaries. While this represents an attack surface for indirect prompt injection, the impact is low as the data is used for architectural analysis and linting configuration within a development environment. The instructions include manual verification steps which provide a human-in-the-loop checkpoint. - [COMMAND_EXECUTION]: The skill involves executing package managers to install
dependency-cruiserand modifying linting/CI scripts. These are standard operations for a development-focused skill and are limited to the scope of the project's own build tools.
Audit Metadata