strict-typescript
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and apply rules to project profiles and authored source code across various directories (frontend, backend, shared). This ingestion of untrusted project code creates a surface for indirect prompt injection if those files contain malicious instructions designed to influence the agent's behavior during the review or scaffolding process.\n
- Ingestion points: Project profiles, source code files, tests, migrations, and scripts as described in
SKILL.md.\n - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified for the data ingestion process.\n
- Capability inventory: The skill utilizes build tools such as
tscto perform type checks and verification.\n - Sanitization: There is no explicit sanitization of the ingested code content before the agent processes it.\n- [COMMAND_EXECUTION]: The skill requires the agent to execute shell commands to verify project compliance with the defined standards.\n
- Evidence:
SKILL.mdcontains the instruction to "Run tsc --noEmit for every authored scope".
Audit Metadata