typescript-strict-mode

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary function is to perform static analysis of a project's tsconfig.json and source code to ensure adherence to TypeScript's strict mode best practices. This is a legitimate development workflow.
  • [SAFE]: All external references point to reputable sources, including official TypeScript documentation (typescriptlang.org), frontendchecklist.io, and typescript-eslint.io. These are used appropriately for educational and verification purposes.
  • [SAFE]: The skill does not contain any hardcoded credentials, suspicious network operations, or attempts to access sensitive system files (e.g., SSH keys, cloud provider configurations).
  • [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it is designed to ingest and process untrusted data from the local project's codebase and configuration files. However, this is necessary for its primary purpose as an auditing tool.
  • Ingestion points: The agent is instructed to read tsconfig.json and project source files (SKILL.md, Code Review section).
  • Boundary markers: No specific delimiters or "ignore instructions" warnings are defined for the ingested file content.
  • Capability inventory: The skill utilizes file reading for inspection and file writing to apply the "Fix" (adding "strict": true to tsconfig.json).
  • Sanitization: No explicit sanitization of ingested code or configuration content is mentioned.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 02:45 AM
Security Audit — agent-trust-hub — typescript-strict-mode