typescript-web-stack
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of instructional text and does not include any executable scripts or binary files.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to execute scripts defined within the repository being worked on, creating a surface for indirect instructions. 1. Ingestion points: Repository-defined package manager scripts mentioned in SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: Execution of shell commands for linting, testing, and building. 4. Sanitization: Absent.
- [SAFE]: The instructions promote standard web development best practices and do not contain malicious patterns such as data exfiltration, obfuscation, or remote code execution.
Audit Metadata