javascript-script-developer
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill emphasizes security best practices throughout its instructions and templates, specifically warning against dangerous patterns like command injection and synchronous file system operations.
- [SAFE]: It provides a validation utility (
scripts/validate-script.mjs) that programmatically checks scripts for compliance with security guidelines, such as the use of ESM, shebang lines, and proper error handling. - [SAFE]: Instructions for child process management explicitly advocate for
execFileoverexecwhen handling user input to mitigate command injection risks. - [SAFE]: The skill recommends a curated list of well-known and reputable third-party libraries (e.g.,
commander,p-limit,cross-spawn) only when standard library features are insufficient.
Audit Metadata