audit-code-quality
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes common shell commands to analyze the project environment and code patterns.
- Evidence: Uses
cat,git log, andrg(ripgrep) to inspect documentation, version history, and source code for naming and architectural consistency. - [COMMAND_EXECUTION]: The skill executes standard development tools via
npxfor codebase validation. - Evidence: Includes commands for running the TypeScript compiler (
tsc), ESLint, and Vitest to ensure code quality and prevent regressions. - [PROMPT_INJECTION]: The skill processes untrusted data from the local repository which could contain malicious instructions.
- Ingestion points: Reads documentation files like
CONTRIBUTING.mdand source files through search tools. - Boundary markers: None present.
- Capability inventory: Shell command execution for analysis and linting.
- Sanitization: None detected. This represents a potential surface for indirect prompt injection, though the impact is limited by the local, non-privileged nature of the execution.
Audit Metadata