typescript-refactor

Pass

Audited by Gen Agent Trust Hub on Jul 20, 2026

Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
  • [PROMPT_INJECTION]: The skill is designed to ingest and analyze external TypeScript source code for refactoring and review. This creates a surface for indirect prompt injection, where an attacker could embed malicious instructions in the target source files to influence the agent's behavior.
  • Ingestion points: Processes user-provided TypeScript source files throughout the project directory (e.g., during refactoring tasks).
  • Boundary markers: The skill instructions do not prescribe the use of delimiters or specific warnings to ignore instructions embedded within the code data being processed.
  • Capability inventory: As a tool for coding assistants, the agent utilizing this skill likely has access to file-system operations and terminal execution capabilities.
  • Sanitization: No logic is provided to sanitize, escape, or validate the content of the external code files before processing.
  • [NO_CODE]: The skill is composed strictly of markdown documentation and metadata files. It does not include any executable scripts (e.g., .js, .py) or binaries.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 20, 2026, 01:29 PM
Security Audit — agent-trust-hub — typescript-refactor