init-typescript

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is designed to generate boilerplate configuration files (package.json, tsconfig.json, biome.json, and pnpm-workspace.yaml) for initializing a TypeScript project. All operations are local and perform standard file system tasks like directory creation and file writing.
  • [SAFE]: The generated pnpm-workspace.yaml includes a security-focused configuration (minimumReleaseAge: 10080) which is a defensive measure intended to protect against newly published malicious packages by enforcing a 7-day wait period.
  • [SAFE]: The dependencies included in the templates (@biomejs/biome and typescript) are well-known, reputable tools in the JavaScript/TypeScript ecosystem.
  • [SAFE]: No indicators of prompt injection, data exfiltration, obfuscation, or unauthorized remote code execution were found.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 05:45 AM