specsfy-specialist-typescript
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains purely instructional content related to TypeScript development standards and best practices.
- [SAFE]: External links provided in the references section target official documentation from 'typescriptlang.org' and 'semver.org', which are well-known and trusted sources.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze local project files (e.g., tsconfig.json, package.json, source code). This constitutes an attack surface where untrusted data could influence agent behavior, though the instructions are focused on legitimate code review and type-checking tasks.
- Ingestion points: SKILL.md (Step 1) specifies reading configuration and project files.
- Boundary markers: None explicitly defined in the prompt text.
- Capability inventory: The skill encourages running standard development tools like 'typecheck', 'tests', 'lint', and 'build' (SKILL.md, Step 7).
- Sanitization: No specific sanitization or filtering of input data is mentioned.
- [SAFE]: No obfuscation, hardcoded credentials, or unauthorized network operations were detected in the analyzed files.
Audit Metadata