code-quality

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes development tools via bun run for TypeScript type checking, ESLint, and Prettier. The scripts/finalize.sh script manages these tasks and includes validation for the MODE parameter to prevent command injection.
  • [INDIRECT_PROMPT_INJECTION]: The finalize.sh script scans markdown files within the repository to check for trailing whitespace and missing newlines. While it processes untrusted file content, the analysis is limited to whitespace patterns and does not involve executing or interpreting instructions within the files.
  • [SAFE]: The skill follows secure coding practices in its shell scripts, such as using set -euo pipefail, creating secure temporary directories with mktemp, and properly cleaning up resources using trap.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 09:37 AM