Skills
Navigate
skills/xsyetopz/skills/optimize-typescript-builds/Gen Agent Trust Hub

optimize-typescript-builds

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the child_process.spawnSync method to execute tsc, node, and bun binaries to measure performance metrics and verify code output equivalence.
  • [EXTERNAL_DOWNLOADS]: The verification harness fetches the tslib package and executes @typescript/analyze-trace using the bun and bunx package managers targeting the npm registry.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted project source code and build configurations to perform its analysis without providing boundary markers or sanitization, potentially allowing embedded instructions in source comments to influence agent actions.
  • Ingestion points: SKILL.md instructions to analyze local tsconfig.json and project source files through compiler diagnostics.
  • Boundary markers: None specified in instructions or verification scripts.
  • Capability inventory: Shell command execution via spawnSync for TypeScript compilers and JavaScript runtimes.
  • Sanitization: No input validation or filtering of external source code content is implemented.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 08:10 PM