fact-check

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill guides the agent to execute standard JavaScript testing commands like npm test and npm run test:coverage. These are restricted to the local environment and are intended for validating code examples within the project repository.
  • [EXTERNAL_DOWNLOADS]: The skill references several well-known and trusted technical documentation platforms, including the MDN Web Docs (developer.mozilla.org), the official ECMAScript Specification (tc39.es), and Node.js documentation. It also suggests the use of broken-link-checker, a standard utility for URL validation.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process technical documentation pages (/docs/concepts/*.mdx). While these are external inputs, the skill follows a strict verification methodology that focuses on technical data rather than executing instructions contained within the documents.
  • [SAFE]: No malicious behavior, prompt injection markers, sensitive file access, or suspicious network operations were found during the analysis. The author 'leonardomso' provides a purely technical utility skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 05:08 AM