typescript-pro
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes code templates for building API clients that process external data. Although this is standard development practice, it defines an attack surface where external content is ingested into the application context.
- Ingestion points: Data enters via fetch response bodies and query/path parameters in the ApiClient examples.
- Boundary markers: Not explicitly provided in code snippets.
- Capability inventory: The code examples utilize fetch for network communication and JSON methods for data processing.
- Sanitization: The implementation demonstrates best practices by using URLSearchParams for safe URL construction and zod for runtime schema validation and data sanitization.
- [SAFE]: The skill is a legitimate technical resource for TypeScript developers with no evidence of malicious intent or hidden behaviors.
Audit Metadata