skills/usetemi/skills/node-26/Gen Agent Trust Hub

node-26

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill instructions and reference materials focus entirely on standard Node.js development practices, such as upgrading runtimes, adopting new ECMAScript features, and verifying dependency compatibility.
  • [COMMAND_EXECUTION]: The skill includes shell commands using ripgrep (rg) to search for deprecated APIs and native addon configurations within the local project. These are standard developer tools used for auditing and migration tasks.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze local source code and configuration files. While this represents a common attack surface for indirect prompt injection if project files contain malicious instructions, the skill's logic is constrained to identifying specific Node.js upgrade markers.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 03:21 AM
Security Audit — agent-trust-hub — node-26