typescript
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill consists of high-quality technical documentation, conventions, and configuration guidelines for TypeScript. No malicious patterns, such as prompt injection, data exfiltration, or obfuscation, were detected.- [NO_CODE]: The skill does not include any executable scripts, binaries, or active code components; it is comprised of markdown documentation and a JSON metadata file.- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for analyzing and reviewing external TypeScript code and configuration files, which represents a potential attack surface.
- Ingestion points: The agent is instructed to read and review .ts, .tsx, tsconfig.json, and package.json files from the user's workspace.
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded prompts in analyzed code.
- Capability inventory: The skill discusses the use of development toolchains like tsc, npm, and linters, which involve file system operations and command execution.
- Sanitization: No explicit sanitization or filtering of external content is described within the skill's instructions.- [EXTERNAL_DOWNLOADS]: The skill references documentation and release notes from well-known services.
- Fetches reference material from official TypeScript documentation repositories on GitHub.
- Links to established developer blogs for version information and release announcements.
Audit Metadata