lint-fix
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill discovers and executes shell commands defined in local project files such as Makefiles and package.json.
- [DYNAMIC_EXECUTION]: Uses a shell eval loop to execute an ordered sequence of validation tools constructed at runtime based on project contents.
- [INDIRECT_PROMPT_INJECTION]: The skill derives its command pipeline from local configuration files, creating a vulnerability surface where a malicious repository could include unauthorized commands in its metadata.
- [EXTERNAL_DOWNLOADS]: References common linting and formatting tools that are typically retrieved from well-known public registries like NPM and PyPI.
Audit Metadata