sonarjs
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses ripgrep (rg) to find configuration files and npm/npx to install and run the eslint-plugin-sonarjs. These are standard development operations and the usage is appropriate for a code quality skill.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from files within the repository to guide its configuration process. 1. Ingestion points:
package.json,eslint.config.*, and.eslintrc*(SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: File editing,npm install, andnpx eslint(SKILL.md). 4. Sanitization: Absent. This processing of repository metadata is a functional requirement for the skill and is handled using standard project tools.
Audit Metadata