skills/terminalskills/skills/knip/Gen Agent Trust Hub

knip

Pass

Audited by Gen Agent Trust Hub on Nov 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill documents the use of knip, a well-known open-source tool for code analysis. The commands provided (npx knip, npm install -D knip) are standard practices for JavaScript development.
  • [COMMAND_EXECUTION]: The skill uses npx knip and other CLI flags. These are necessary for the tool's primary purpose and are executed within the project's local environment.
  • [DATA_EXPOSURE]: No sensitive data access or exfiltration patterns were detected. The skill only analyzes project structure and source files to identify unused code.
  • [PRIVILEGE_ESCALATION]: No elevation attempts (like sudo) are present.
  • [SAFE_PRACTICE]: The instructions explicitly recommend working on a clean Git tree and reviewing changes with git diff before committing, which is a standard security and stability best practice when using tools that modify source code.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 11, 2026, 07:25 AM