setup-ts-deep-modules

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs dependency-cruiser as a development dependency using standard package managers (npm, pnpm, yarn, or bun). This is an established and widely used tool for architectural linting.
  • [COMMAND_EXECUTION]: The skill instructs the agent to run package manager commands and the depcruise CLI. These actions are strictly scoped to setting up and verifying the architectural rules defined in the configuration file.
  • [DATA_EXPOSURE]: No sensitive file access or hardcoded credentials were detected. The skill correctly suggests using environment-specific package managers and documentation files like CLAUDE.md or AGENTS.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes the repository structure to detect environment settings (package manager and directory structure). It does not ingest untrusted external data or interpolate unsanitized strings into agent prompts, making the attack surface for indirect injection negligible.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 09:46 AM