tsconfig-json-rules
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
SKILL.mdfile contains instructions for the agent to execute acatcommand to read.claude/context/memory/learnings.md. This is a documented pattern for state management and context retrieval in specific agent environments. - [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection because it reads and analyzes external
tsconfig.jsonfiles which could contain malicious instructions embedded in comments or string values. - Ingestion points:
tsconfig.jsonfiles identified via theglobspattern in the skill configuration. - Boundary markers: There are no explicit markers or instructions provided to the agent to help it distinguish between data content and potential instructions within the processed files.
- Capability inventory: The skill is configured with
Read,Write, andEdittools, granting it the ability to modify files in the repository. - Sanitization: No explicit sanitization or validation of the
tsconfig.jsoncontent is performed before the model processes the file.
Audit Metadata