fact-check
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill guides the agent to execute standard JavaScript testing commands like
npm testandnpm run test:coverage. These are restricted to the local environment and are intended for validating code examples within the project repository. - [EXTERNAL_DOWNLOADS]: The skill references several well-known and trusted technical documentation platforms, including the MDN Web Docs (developer.mozilla.org), the official ECMAScript Specification (tc39.es), and Node.js documentation. It also suggests the use of
broken-link-checker, a standard utility for URL validation. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process technical documentation pages (
/docs/concepts/*.mdx). While these are external inputs, the skill follows a strict verification methodology that focuses on technical data rather than executing instructions contained within the documents. - [SAFE]: No malicious behavior, prompt injection markers, sensitive file access, or suspicious network operations were found during the analysis. The author 'leonardomso' provides a purely technical utility skill.
Audit Metadata