typescript-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation and helper scripts for TypeScript development. The Deno scripts (analyze.ts, generate-types.ts, scaffold-module.ts) use standard filesystem operations with appropriate permissions (--allow-read, --allow-write) and do not perform any hidden or suspicious activities.
- [INDIRECT_PROMPT_INJECTION]: The utility scripts ingest external code and JSON data for processing. While this represents a potential attack surface for indirect prompt injection, it is the primary intended functionality of the tools (static analysis and type generation) and does not exhibit malicious intent.
- Ingestion points: scripts/analyze.ts (reading source files) and scripts/generate-types.ts (parsing JSON data).
- Boundary markers: Not explicitly implemented in the provided scripts or instructions.
- Capability inventory: Filesystem read/write access via Deno APIs in the provided scripts.
- Sanitization: Basic property name escaping is performed during type generation, but no general sanitization of external content is applied.
Audit Metadata