typescript-expert
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands and a Python diagnostic script to analyze the project environment, check tool versions, and identify configuration issues. These operations are performed using standard developer tools like
npx,node, andgrep. - [DYNAMIC_EXECUTION]: The skill includes a standalone Python script (
scripts/ts_diagnostic.py) and Node.js execution strings to dynamically assess project state and parse configuration files at runtime. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external project data, including source code and configuration files (
package.json,tsconfig.json). While this creates a potential surface for indirect prompt injection if those files contain malicious instructions, the skill uses standard parsing methods (likejson.load) and limits its output to diagnostic reports.
Audit Metadata