javascript-pro

Pass

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill's core workflow requires the agent to execute standard development tools including eslint --fix for code linting and jest for unit testing to ensure code quality and coverage. These are routine operations for a coding specialist.
  • [COMMAND_EXECUTION]: The AIX Pack Compliance section includes an instruction to create a specific output directory using mkdir -p .aix. This is a benign filesystem management task used to organize generated artifacts.
  • [EXTERNAL_DOWNLOADS]: The documentation contains a link to external reference material on the author's GitHub Pages site (jeffallan.github.io). This is a legitimate documentation link and does not represent a security risk.
  • [SAFE]: The skill processes user-provided JavaScript code for review and refactoring, which is its primary intended function. While this involves ingesting untrusted data, the associated capabilities are limited to standard developer tools and do not present an exfiltration or escalation risk.
Audit Metadata
Risk Level
SAFE
Analyzed
May 16, 2026, 01:22 AM
Security Audit — agent-trust-hub — javascript-pro