build-effect-ts-v3

Pass

Audited by Gen Agent Trust Hub on May 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists entirely of architectural guidance, coding standards, and documentation for the Effect-TS ecosystem.
  • Security alignment: The instructions explicitly promote security-positive patterns:
  • Input Validation: Mandates the use of Schema to decode and validate untrusted data at system boundaries before it enters domain logic.
  • Secret Management: Enforces the use of the Redacted data type for credentials to ensure they are never accidentally logged or exposed in error messages.
  • Safe Configuration: Discourages direct usage of process.env, requiring the use of the library's typed Config system which supports fallbacks and validation.
  • [COMMAND_EXECUTION]: The skill documents the process execution capabilities of the library.
  • Evidence: references/platform/05-command.md provides detailed instructions on using the Command module for child process management. This is presented as standard library functionality for developers and includes warnings about avoiding shell-injection-prone patterns by using argument arrays instead of shell strings.
  • [EXTERNAL_DOWNLOADS]: The skill identifies standard dependencies for projects using this library.
  • Evidence: Files such as references/workflows/01-greenfield-cli.md and references/workflows/02-greenfield-http-api.md include package.json snippets. These reference well-known, official packages from the @effect/* scope and established ecosystem tools like vitest, tsx, and typescript from standard registries.
Audit Metadata
Risk Level
SAFE
Analyzed
May 17, 2026, 10:40 PM
Security Audit — agent-trust-hub — build-effect-ts-v3