typescript-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes a static analysis tool (scripts/analyze.ts) that reads and processes local TypeScript source code provided by the user. Ingestion points: Local files are read via Deno.readTextFile based on user-supplied paths. Boundary markers: No explicit delimiters or boundary instructions are used for analyzed content. Capability inventory: The script performs filesystem read/write operations for analysis and scaffolding. Sanitization: The tool performs static RegEx-based pattern matching only and does not execute the ingested source code.
- [COMMAND_EXECUTION]: The skill provides utility scripts designed to assist in TypeScript development. These scripts require Deno permissions to read and write files within the project directory but do not exhibit suspicious network activity or attempts to access sensitive system paths.
Audit Metadata