knip
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents the use of
knip, a well-known open-source tool for code analysis. The commands provided (npx knip,npm install -D knip) are standard practices for JavaScript development. - [COMMAND_EXECUTION]: The skill uses
npx knipand other CLI flags. These are necessary for the tool's primary purpose and are executed within the project's local environment. - [DATA_EXPOSURE]: No sensitive data access or exfiltration patterns were detected. The skill only analyzes project structure and source files to identify unused code.
- [PRIVILEGE_ESCALATION]: No elevation attempts (like
sudo) are present. - [SAFE_PRACTICE]: The instructions explicitly recommend working on a clean Git tree and reviewing changes with
git diffbefore committing, which is a standard security and stability best practice when using tools that modify source code.
Audit Metadata