build-effect-ts-v3
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of architectural guidance, coding standards, and documentation for the Effect-TS ecosystem.
- Security alignment: The instructions explicitly promote security-positive patterns:
- Input Validation: Mandates the use of
Schemato decode and validate untrusted data at system boundaries before it enters domain logic. - Secret Management: Enforces the use of the
Redacteddata type for credentials to ensure they are never accidentally logged or exposed in error messages. - Safe Configuration: Discourages direct usage of
process.env, requiring the use of the library's typedConfigsystem which supports fallbacks and validation. - [COMMAND_EXECUTION]: The skill documents the process execution capabilities of the library.
- Evidence:
references/platform/05-command.mdprovides detailed instructions on using theCommandmodule for child process management. This is presented as standard library functionality for developers and includes warnings about avoiding shell-injection-prone patterns by using argument arrays instead of shell strings. - [EXTERNAL_DOWNLOADS]: The skill identifies standard dependencies for projects using this library.
- Evidence: Files such as
references/workflows/01-greenfield-cli.mdandreferences/workflows/02-greenfield-http-api.mdincludepackage.jsonsnippets. These reference well-known, official packages from the@effect/*scope and established ecosystem tools likevitest,tsx, andtypescriptfrom standard registries.
Audit Metadata