typescript-backend-project-setup
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to initialize a development environment, including
npx create-nx-workspace,nx add, andpnpm add. These are standard tools for JavaScript/TypeScript development. - [COMMAND_EXECUTION]: Uses
chmod +xto enable a local script (.claude/hooks/block-dangerous-commands.sh) intended to function as a git hook. - [SAFE]: The skill actively implements security best practices by providing a
.claude/settings.jsonfile that denies the agent access to sensitive files like.envand prevents modification of core configuration files. - [SAFE]: Includes a functional guardrail script that monitors shell commands and blocks potentially destructive git operations (e.g.,
--force,--hard,--no-verify). - [SAFE]: References and dependencies (such as
husky,vitest, andeslintplugins) are standard, well-known industry tools.
Audit Metadata