ts-pattern-refactor
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses several shell commands to identify code patterns and verify changes.
- Utilizes
rg(ripgrep) andawkto scan thesrc/directory for nested ternaries, repeated discriminator checks, and JSX fragment chains. - Executes project verification commands including
pnpm typecheck,pnpm lint,pnpm test, andnpx tscto ensure refactored code maintains integrity. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes untrusted source code from the repository.
- Ingestion points: Reads files within the
src/directory viargand accesses project-specific memory at~/.claude/projects/<this-project>/memory/feedback_ts_pattern_threshold.md. - Boundary markers: The instructions do not define specific boundary markers or 'ignore' instructions for the content being refactored.
- Capability inventory: The skill can execute shell commands, read/write local files, and invoke MCP tools for symbol searching and documentation querying.
- Sanitization: There is no explicit sanitization of the content read from the codebase before it is used to influence the refactoring process.
Audit Metadata