zod-json-schema
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily documentation and tutorial content for developers using Zod v4. It demonstrates legitimate use of library APIs and standard Node.js modules.
- [COMMAND_EXECUTION]: The skill provides examples of scripts that use 'node:fs' for reading and writing schema files to disk ('fs.readFileSync', 'fs.writeFileSync'). This is standard practice for build-time schema generation and does not involve sensitive file paths or unauthorized access.
- [EXTERNAL_DOWNLOADS]: The documentation references placeholder URLs ('https://example.com/schemas/...') and a schema hosted on Gist by the skill author. No suspicious external dependencies or remote code execution patterns were found.
- [DYNAMIC_EXECUTION]: The skill illustrates the use of an 'override' callback provided by the Zod library to mutate JSON objects during conversion. This is a documented feature of the Zod library and does not constitute unsafe dynamic code execution.
Audit Metadata