setup-ts-deep-modules
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary purpose is to automate the setup of a well-known static analysis tool, dependency-cruiser. Its actions—detecting package managers, installing a development dependency, writing a configuration file, and updating package.json scripts—are transparent and align with its stated description.
- [COMMAND_EXECUTION]: The skill uses the environment's package manager (npm, pnpm, yarn, or bun) to install dependency-cruiser. These commands are localized to the user's project and do not involve unauthorized privilege escalation or arbitrary remote code execution.
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install a legitimate library from a standard package registry. There are no links to untrusted third-party binaries, obfuscated URLs, or hidden download scripts.
- [DATA_EXFILTRATION]: No network exfiltration patterns were identified. The skill operates locally on the project structure and does not access sensitive directories such as .ssh or .aws.
Audit Metadata