ub-ts
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides templates and instructions for TypeScript project configuration without any malicious behavior.
- [COMMAND_EXECUTION]: The skill suggests running standard development tools like
npx tscandnpx eslint. These are legitimate operations for a TypeScript development skill and are documented as manual steps for the user or part of optional task automation. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes local project files such as
package.jsonandtsconfig.jsonto determine the project's environment. This is a necessary function for the skill's purpose and does not present a significant security risk as it uses the data for archetype detection rather than direct execution. - [EXTERNAL_DOWNLOADS]: The skill contains links to official documentation for TypeScript and Node.js. These references are used for informational purposes and do not trigger unauthorized remote code execution or data exfiltration.
Audit Metadata