husky
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions utilize standard shell commands for installing and initializing development tools within a local environment, such as
npm installandnpx husky init.- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where repository files are automatically processed by tools, creating a standard surface area for indirect prompt injection. - Ingestion points: Staged repository files (referenced in
SKILL.md). - Boundary markers: None explicitly defined in the hook scripts or configuration.
- Capability inventory: Executes
eslint,prettier, andnpm testacross repository files via Git hooks defined inSKILL.md. - Sanitization: None; the skill relies on the internal security of the configured linters and test runners.- [SAFE]: The external dependencies (
husky,lint-staged) are widely-used, industry-standard packages for Git hook management and code formatting. The instructions follow standard integration practices.
Audit Metadata