node-lint
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing and using well-known packages from the npm registry, such as @biomejs/biome, eslint, and prettier. These resources are from established organizations and official repositories.\n- [COMMAND_EXECUTION]: The skill workflow involves running standard development tools (npm, npx, python3) to install dependencies, execute linters, and verify project configuration via a provided verification script (scripts/check_lint_setup.py).\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-supplied configuration files such as package.json and various linting configurations to determine the project setup.\n
- Ingestion points: The python script scripts/check_lint_setup.py and agent file-reading tasks access package.json and lint/format configuration files from the local filesystem.\n
- Boundary markers: Not explicitly provided in instructions when the agent reads project files.\n
- Capability inventory: The skill can execute npm/npx commands and local scripts to modify and check the codebase.\n
- Sanitization: Input is parsed as JSON or processed via regular expressions to handle comments; the skill does not execute code contained within the data files it reads.
Audit Metadata