biome-typescript
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches version information from the npm registry and GitHub's official API for the Biome project. These are well-known, trusted sources used for maintaining up-to-date developer tooling.
- [COMMAND_EXECUTION]: Provides standard installation and execution commands for the Biome toolchain, such as
npm installandnpx biome check. These commands are essential and expected for the skill's primary purpose of managing project linting and formatting. - [INDIRECT_PROMPT_INJECTION]: As a linting configuration skill, it processes user-provided source code. While this creates an ingestion point for untrusted data, the actions are limited to static analysis and code transformation according to a strict schema-validated configuration.
Audit Metadata