ps-typescript-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains architectural and stylistic guidelines for TypeScript development. It does not include any scripts or commands.
- [SAFE]: No network operations, sensitive file access, or credential usage were detected. The guidelines specifically recommend safe handling of external data using
unknownand runtime validation. - [SAFE]: The skill configuration includes
disable-model-invocation: true, which restricts the agent from calling tools based on these instructions, further reducing security risk. - [INDIRECT_PROMPT_INJECTION]: The skill establishes a surface for processing untrusted code files. 1. Ingestion points: Activated for
.tsand.tsxfiles (SKILL.md). 2. Boundary markers: Recommends runtime schemas but lacks explicit prompt delimiters. 3. Capability inventory: None; the skill provides no code or tools. 4. Sanitization: Recommends using repository schema libraries for validation.
Audit Metadata