stylelint
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill integrates Stylelint into the development workflow using standard industry practices.
- [EXTERNAL_DOWNLOADS]: The skill installs well-known packages (
stylelint,stylelint-config-standard) via the official npm registry. These are standard development dependencies and do not pose a risk. - [COMMAND_EXECUTION]: The skill executes standard commands such as
npm install,npx stylelint, andrg(ripgrep) for file discovery and linting. These operations are scoped to the repository context and are necessary for the skill's stated purpose. - [INDIRECT_PROMPT_INJECTION]: While the skill ingests data from repository files (e.g.,
package.json, CSS files), it does so to configure and run a linter. The capability to execute code is restricted to the linter itself and standard package management, presenting a low surface for exploitation.
Audit Metadata