javascript-pro
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill's core workflow requires the agent to execute standard development tools including
eslint --fixfor code linting andjestfor unit testing to ensure code quality and coverage. These are routine operations for a coding specialist. - [COMMAND_EXECUTION]: The AIX Pack Compliance section includes an instruction to create a specific output directory using
mkdir -p .aix. This is a benign filesystem management task used to organize generated artifacts. - [EXTERNAL_DOWNLOADS]: The documentation contains a link to external reference material on the author's GitHub Pages site (
jeffallan.github.io). This is a legitimate documentation link and does not represent a security risk. - [SAFE]: The skill processes user-provided JavaScript code for review and refactoring, which is its primary intended function. While this involves ingesting untrusted data, the associated capabilities are limited to standard developer tools and do not present an exfiltration or escalation risk.
Audit Metadata