javascript-style-guide

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill incorporates a workflow that involves executing standard development tools (such as eslint, prettier, and npm test) and repository-specific Python scripts (scripts/resolve_style_guides.py, scripts/validate_trigger_matrix_sync.py) to automate code quality checks and management tasks.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and analyze JavaScript source files, creating a potential surface for indirect prompt injection from untrusted code artifacts.\n
  • Ingestion points: JavaScript source files (.js, .jsx, .mjs, .cjs) and related configuration files processed during code review and refactoring tasks.\n
  • Boundary markers: No explicit delimiters or instructions are provided to the agent to distinguish between the style guide's instructions and the content of the files being analyzed.\n
  • Capability inventory: The skill utilizes shell commands for linting and testing, which could be exploited if malicious configurations are present in the analyzed repository (e.g., a malicious npm test script).\n
  • Sanitization: The skill focuses on instructional guidance and does not include programmatic sanitization of the analyzed content.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 08:32 PM