biome-typescript

Pass

Audited by Gen Agent Trust Hub on Aug 29, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches version information from the npm registry and GitHub's official API for the Biome project. These are well-known, trusted sources used for maintaining up-to-date developer tooling.
  • [COMMAND_EXECUTION]: Provides standard installation and execution commands for the Biome toolchain, such as npm install and npx biome check. These commands are essential and expected for the skill's primary purpose of managing project linting and formatting.
  • [INDIRECT_PROMPT_INJECTION]: As a linting configuration skill, it processes user-provided source code. While this creates an ingestion point for untrusted data, the actions are limited to static analysis and code transformation according to a strict schema-validated configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 29, 2026, 05:55 PM