typescript
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a command
pnpm run typecheckto validate TypeScript types. This is a standard and expected part of a development workflow. - [INDIRECT_PROMPT_INJECTION]: The skill is intended to help the agent refactor and implement TypeScript code. This involves processing codebase content which could theoretically contain instructions, however, the skill lacks any logic that would execute untrusted data or interpolate it into critical prompts without sanitization.
- [SAFE]: All instructions and examples follow industry-standard TypeScript best practices, such as using const types, avoiding the any type, and implementing proper type guards. No obfuscation, data exfiltration, or persistence mechanisms were found.
Audit Metadata