setup-ts-deep-modules
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard Node.js package managers (npm, pnpm, yarn, bun) to install development dependencies and execute linting commands. These operations are standard for repository setup and are intended to be user-invoked.
- [EXTERNAL_DOWNLOADS]: The skill installs 'dependency-cruiser', a reputable and widely used open-source tool for validating dependency graphs. It correctly identifies the package as a devDependency.
- [INDIRECT_PROMPT_INJECTION]: The skill reads existing repository files such as lockfiles and configuration files to detect the environment. While these are external data sources, the skill uses them strictly for environment detection and merging configuration rules, with no evidence of instructions that could be manipulated by malicious file content. (Severity: LOW)
- [PERSISTENCE]: The skill adds a linting script to 'package.json' and links to a README in 'CLAUDE.md' or 'AGENTS.md'. These are standard practices for development workflows and documentation, intended to ensure architectural consistency across sessions.
Audit Metadata