setup-ts-deep-modules
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs
dependency-cruiseras a development dependency using standard package managers (npm, pnpm, yarn, or bun). This is an established and widely used tool for architectural linting. - [COMMAND_EXECUTION]: The skill instructs the agent to run package manager commands and the
depcruiseCLI. These actions are strictly scoped to setting up and verifying the architectural rules defined in the configuration file. - [DATA_EXPOSURE]: No sensitive file access or hardcoded credentials were detected. The skill correctly suggests using environment-specific package managers and documentation files like
CLAUDE.mdorAGENTS.md. - [INDIRECT_PROMPT_INJECTION]: The skill processes the repository structure to detect environment settings (package manager and directory structure). It does not ingest untrusted external data or interpolate unsanitized strings into agent prompts, making the attack surface for indirect injection negligible.
Audit Metadata