effect-v4

Pass

Audited by Gen Agent Trust Hub on Aug 2, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill is a technical reference and verification tool designed to assist developers with Effect v4 patterns. It does not exhibit malicious behavior such as prompt injection, credential theft, or persistence mechanisms.- [COMMAND_EXECUTION]: The scripts/check-effect.nu script executes external binaries including effect-tsgo, oxlint, and ast-grep. These binaries are resolved from the target project's node_modules/.bin directory or the system PATH. This is standard behavior for a linting tool and is limited to executing tools already present in the user's development environment.- [DATA_EXPOSURE]: The skill's checker script reads package.json and project source files to identify workspace roots and validate coding patterns. These operations are local and read-only, conforming to the skill's stated purpose without unauthorized data access.- [PROMPT_INJECTION]: The instructions in SKILL.md and the reference documentation follow technical best practices and do not contain attempts to override agent safety guidelines or extract system prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 2, 2026, 05:12 AM
Security Audit — agent-trust-hub — effect-v4