node-typescript

Warn

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: MEDIUMMETADATA_POISONING
Full Analysis
  • [METADATA_POISONING]: The skill documentation and evaluation logic are centered around fictional technical information. The file references/tsconfig-playbook.md specifies fabricated release dates (March 2026 and June 2026) for TypeScript 6.0 and 7.0, and presents these versions as current or imminent milestones. It describes a non-existent 'Go-based native compiler' (tsgo) as a major architectural shift for TypeScript 7.0, which is not an official Microsoft project. The skill provides links to non-existent release note pages on typescriptlang.org and a non-existent repository at github.com/microsoft/typescript-go to support these claims. The evaluation cases in evals/evals.json reinforce this deceptive context by requiring the agent to provide advice based on 'TS 6-era guidance' and the fictional native compiler, which may cause the agent to give incorrect or hallucinated technical support to users.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 12, 2026, 05:22 PM