lint
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Bash commands to identify the environment's package manager and run the corresponding lint script (e.g.,
npm run lint).- [EXTERNAL_DOWNLOADS]: Employsnpx eslintas a fallback mechanism, which may download the ESLint package from the official npm registry if it is not cached locally.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted codebase files. While it is a standard linting tool, malicious content within the analyzed files could be reflected in the tool's output and potentially influence the agent. 1. Ingestion points: Local JS/TS source files via ESLint. 2. Boundary markers: Absent. 3. Capability inventory: Bash execution via the Bash tool. 4. Sanitization: None; output is reported directly to the user.
Audit Metadata