ui-checkstyle

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute shell commands that invoke local project dependencies. Specifically, it runs ./node_modules/.bin/organize-imports-cli, ./node_modules/.bin/eslint, and ./node_modules/.bin/prettier. These are standard development tools used for maintaining code quality and consistent formatting.
  • [DATA_EXPOSURE]: The skill uses git diff to identify file paths modified in the current branch. This metadata is stored in temporary files (e.g., /tmp/src_files.txt) to scope the linting and formatting operations. No sensitive data or credentials are accessed or transmitted.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data in the form of file paths and file contents through linting tools.
  • Ingestion points: Modified file names are captured via git diff in SKILL.md.
  • Boundary markers: None present; file lists are piped directly into tools.
  • Capability inventory: Uses Bash to invoke subprocesses for linting and formatting across multiple UI directories.
  • Sanitization: None present; however, the risk is minimal as the commands are scoped to specific internal directories and use local project binaries.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 08:38 AM
Security Audit — agent-trust-hub — ui-checkstyle