biome-validator

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary logic resides in a Python script that performs read-only operations on local project configuration files (biome.json and package.json). It does not request network access or interact with sensitive system files.- [SAFE]: No evidence of prompt injection, obfuscation, or persistence mechanisms was found in the instructions or scripts.- [SAFE]: The skill uses standard Python libraries for JSON parsing and regex operations, avoiding dangerous patterns like eval() or subprocess execution of untrusted input.- [SAFE]: External URLs referenced in the documentation are official Biome documentation links, and the migration commands provided are standard industry practices for the tool described.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 11:31 PM