javascript-style-guide
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill incorporates a workflow that involves executing standard development tools (such as
eslint,prettier, andnpm test) and repository-specific Python scripts (scripts/resolve_style_guides.py,scripts/validate_trigger_matrix_sync.py) to automate code quality checks and management tasks.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and analyze JavaScript source files, creating a potential surface for indirect prompt injection from untrusted code artifacts.\n - Ingestion points: JavaScript source files (.js, .jsx, .mjs, .cjs) and related configuration files processed during code review and refactoring tasks.\n
- Boundary markers: No explicit delimiters or instructions are provided to the agent to distinguish between the style guide's instructions and the content of the files being analyzed.\n
- Capability inventory: The skill utilizes shell commands for linting and testing, which could be exploited if malicious configurations are present in the analyzed repository (e.g., a malicious
npm testscript).\n - Sanitization: The skill focuses on instructional guidance and does not include programmatic sanitization of the analyzed content.
Audit Metadata