code-quality
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes development tools via
bun runfor TypeScript type checking, ESLint, and Prettier. Thescripts/finalize.shscript manages these tasks and includes validation for theMODEparameter to prevent command injection. - [INDIRECT_PROMPT_INJECTION]: The
finalize.shscript scans markdown files within the repository to check for trailing whitespace and missing newlines. While it processes untrusted file content, the analysis is limited to whitespace patterns and does not involve executing or interpreting instructions within the files. - [SAFE]: The skill follows secure coding practices in its shell scripts, such as using
set -euo pipefail, creating secure temporary directories withmktemp, and properly cleaning up resources usingtrap.
Audit Metadata