setup-ts-deep-modules
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill carries out legitimate developer workflows such as detecting the package manager and repository structure to apply configuration templates.
- [COMMAND_EXECUTION]: Uses standard package managers (npm, pnpm, yarn, bun) to install the dependency-cruiser package as a devDependency. This behavior is consistent with the skill's primary purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with the local file system to read configuration files and directory structures. This represents a normal architectural inspection surface with no high-risk capabilities or unsafe interpolation of external data.
- [REMOTE_CODE_EXECUTION]: There are no patterns of remote code execution or piping of untrusted web content to interpreters. The installation of known packages from standard registries is a safe practice.
Audit Metadata