verification-loop
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard development lifecycle commands such as
npm run build,pnpm build,npx tsc, andnpm run test. These operations are well-scoped to the local project directory and are essential for the skill's stated purpose of verifying code quality. - [DATA_EXFILTRATION]: Contains a security phase that uses
grepto scan local files for potential hardcoded credentials (e.g., OpenAI keys starting withsk-or generalapi_keypatterns). This is a defensive security check intended to prevent accidental data exposure in version control and does not involve any external network transmission. - [EXTERNAL_DOWNLOADS]: Utilizes
npx tsc, which may download the TypeScript compiler from the official npm registry if not already present. This is a standard practice for JavaScript/TypeScript development environments and targets a well-known service. - [PROMPT_INJECTION]: No instructions were found that attempt to override agent safety protocols, bypass constraints, or extract system prompts.
Audit Metadata