tomtom-maps-sdk-js-contribution
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a contributor orientation guide for the TomTom Maps SDK for JavaScript monorepo. It instructs the agent to follow established project conventions and architecture.
- [COMMAND_EXECUTION]: The commands provided (
pnpm lint:fix,pnpm format:fix) are standard development tasks for linting and formatting code using Biome. They are executed within the context of the repository root and do not involve remote code execution or privilege escalation. - [INDIRECT_PROMPT_INJECTION]: The skill directs the agent to read documentation files (
AGENTS.md) and source directories to understand project context. While this involves reading local data, it follows standard development procedures and does not involve ingesting untrusted external input. - [DATA_EXPOSURE_AND_EXFILTRATION]: No sensitive information, credentials, or exfiltration patterns were found. The skill specifically encourages security best practices when adding external resource fetching, such as using protocol allowlists, AbortController timeouts, and size caps.
Audit Metadata