ts-modern
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted data from the codebase to drive its logic.\n
- Ingestion points: Reads package.json, lockfiles, and existing source code files (SKILL.md).\n
- Boundary markers: No explicit delimiters or instructions are provided to help the agent distinguish between data and potential instructions embedded in the project files.\n
- Capability inventory: The skill directs the agent to execute project-specific validation scripts, such as typecheck, lint, tests, and build commands (SKILL.md).\n
- Sanitization: No sanitization or verification steps are included for the content of the ingested files.\n- [COMMAND_EXECUTION]: The workflow requires the agent to run arbitrary, project-defined scripts for code validation.\n
- Evidence: 'Validate with available typecheck, lint, tests, and build commands in the target project.' (SKILL.md).
Audit Metadata