node-typescript
Warn
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: MEDIUMMETADATA_POISONING
Full Analysis
- [METADATA_POISONING]: The skill documentation and evaluation logic are centered around fictional technical information. The file references/tsconfig-playbook.md specifies fabricated release dates (March 2026 and June 2026) for TypeScript 6.0 and 7.0, and presents these versions as current or imminent milestones. It describes a non-existent 'Go-based native compiler' (tsgo) as a major architectural shift for TypeScript 7.0, which is not an official Microsoft project. The skill provides links to non-existent release note pages on typescriptlang.org and a non-existent repository at github.com/microsoft/typescript-go to support these claims. The evaluation cases in evals/evals.json reinforce this deceptive context by requiring the agent to provide advice based on 'TS 6-era guidance' and the fictional native compiler, which may cause the agent to give incorrect or hallucinated technical support to users.
Audit Metadata