ui-checkstyle
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to execute shell commands that invoke local project dependencies. Specifically, it runs./node_modules/.bin/organize-imports-cli,./node_modules/.bin/eslint, and./node_modules/.bin/prettier. These are standard development tools used for maintaining code quality and consistent formatting. - [DATA_EXPOSURE]: The skill uses
git diffto identify file paths modified in the current branch. This metadata is stored in temporary files (e.g.,/tmp/src_files.txt) to scope the linting and formatting operations. No sensitive data or credentials are accessed or transmitted. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data in the form of file paths and file contents through linting tools.
- Ingestion points: Modified file names are captured via
git diffinSKILL.md. - Boundary markers: None present; file lists are piped directly into tools.
- Capability inventory: Uses
Bashto invoke subprocesses for linting and formatting across multiple UI directories. - Sanitization: None present; however, the risk is minimal as the commands are scoped to specific internal directories and use local project binaries.
Audit Metadata