ppt-typespec

Pass

Audited by Gen Agent Trust Hub on Jun 21, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard development commands including npx, just, and pnpm. These commands are used to compile API specifications and regenerate client libraries within the project's local directory structure. The use of --no-install in verification steps is a security best practice that prevents the execution of uninstalled remote packages.
  • [EXTERNAL_DOWNLOADS]: The use of npx tsp may trigger a download of the TypeSpec compiler from the official npm registry if it is not already present in the local environment. This is standard behavior for Node.js-based development tools and does not involve untrusted sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 21, 2026, 05:04 AM
Security Audit — agent-trust-hub — ppt-typespec