typescript-expert
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands and the
npxutility to perform project diagnostics, verify environment versions, and execute standard development tools (e.g.,tsc,npm,vitest). These operations are local to the workspace and essential for the skill's functionality as a TypeScript expert. - [COMMAND_EXECUTION]: The
scripts/ts_diagnostic.pyfile usessubprocess.run(shell=True)to execute hardcoded diagnostic commands. Analysis shows these commands are static strings used for environmental checks (e.g.,npx tsc --version) and do not incorporate external or unsanitized input, mitigating command injection risks. - [SAFE]: All external utilities and libraries referenced (such as Biome, ESLint, Turborepo, Vitest, and ts-migrate) are well-known, industry-standard tools within the TypeScript ecosystem.
- [SAFE]: No evidence of obfuscation, hardcoded credentials, data exfiltration, or persistence mechanisms was found in the provided files.
Audit Metadata