htmlhint
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and workflow are consistent with legitimate code quality and linting practices.
- [INDIRECT_PROMPT_INJECTION]: The skill has a standard surface for processing repository files.
- Ingestion points: The skill reads package.json, .htmlhintrc, and various *.html files within the repository.
- Boundary markers: No explicit instruction delimiters or ignore warnings are used when processing file content.
- Capability inventory: The skill can execute shell commands via npm install and npx htmlhint.
- Sanitization: The skill relies on the standard htmlhint parser for file validation without additional input sanitization.
- [COMMAND_EXECUTION]: The skill uses ripgrep (rg) for file discovery and npx to execute the linter, both of which are common tools for repository analysis.
- [EXTERNAL_DOWNLOADS]: The skill installs the htmlhint package from the public npm registry, which is a standard development practice for this use case.
Audit Metadata