sanity-tsdown-config
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references standard package installations using
pnpm addfor development dependencies such as@sanity/tsdown-config,tsdown, andoxc-transform-react. These are legitimate packages within the Sanity and Rolldown ecosystems. - [COMMAND_EXECUTION]: The skill provides instructions for standard build and watch commands (
pnpm tsdown,pnpm tsdown --watch) and a platform-specific skill addition command (npx skills add). These are benign instructional examples for the intended use case. - [SAFE]: The vendor metadata (
sanity-io) and package naming conventions (@sanity/tsdown-config) are consistent, representing normal vendor functionality without evidence of typosquatting or impersonation. - [SAFE]: No obfuscation, data exfiltration patterns, or persistence mechanisms were detected. The use of environment variables like
ENABLE_BUNDLE_ANALYZERfor conditional configuration is a standard and safe practice.
Audit Metadata