setup-ts-deep-modules
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
dependency-cruiserpackage from official Node.js registries (NPM, Yarn, Bun). This is a well-known, legitimate development tool used for code analysis and linting. - [COMMAND_EXECUTION]: The instructions direct the agent to execute standard repository management commands, such as installing packages, creating directories, and updating script fields in
package.json. These operations are transparent and consistent with the skill's stated purpose. - [PERSISTENCE]: The skill instructs the agent to add architectural documentation to the project's instructions files (
CLAUDE.mdorAGENTS.md). While this modifies project state across sessions, it is a benign documentation practice for maintaining codebase design and does not constitute a malicious persistence mechanism. - [SAFE]: No malicious patterns, such as prompt injection, data exfiltration, obfuscation, or privilege escalation, were detected. The skill uses restricted model invocation and focuses on establishing linting boundaries.
Audit Metadata