tsdown
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of documentation and configuration examples for the tsdown library. No executable scripts or malicious instructions were found.
- [EXTERNAL_DOWNLOADS]: The documentation references several well-known and legitimate packages in the JavaScript ecosystem (e.g., tsdown, typescript, lightningcss, postcss, publint) as optional dependencies for specific features like CSS handling or package validation.
- [DATA_EXFILTRATION]: No sensitive file access or unauthorized network operations were detected. All network-related examples are standard development practices like deploying to a CDN or fetching remote configurations in build hooks.
- [PROMPT_INJECTION]: The instructions focus on assisting the user with build-related tasks and do not attempt to bypass safety guidelines or override agent behavior.
Audit Metadata