config-new-module
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/create-module.jsexecutes shell commands usingnode:child_process.spawnSync. Specifically, it runsnpm install,npm run build, andnpm run test. These operations are central to the skill's purpose of project scaffolding and include strict regex validation for module names and namespaces to prevent shell injection.- [EXTERNAL_DOWNLOADS]: Execution of the scaffolding script triggersnpm install, which downloads dependencies from the public npm registry. The script also hardcodes the addition ofts-node@^10.9.2to the root project's dependencies and includes templates for new modules that depend onjest,ts-jest, andtypescript.
Audit Metadata