upgrade-typescript-go
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of several packages through standard package managers, including
typescript@latest,@typescript/typescript6, and@typescript/native-preview. These installations are performed from the standard registry and are aligned with the skill's primary function of upgrading project dependencies. - [COMMAND_EXECUTION]: The migration workflow relies on local shell commands such as
gitfor branch isolation,pnpmfor package management, andtscfor project compilation and verification. These operations are standard for development environments and are used strictly for the stated purpose of the skill. - [INDIRECT_PROMPT_INJECTION]: The preflight audit involves scanning the local repository using
git grepto identify specific import patterns. This creates an ingestion surface for data within the repository, but the risk is mitigated by the skill's technical focus and the subsequent verification tiers (testing, linting, building) which ensure project integrity.
Audit Metadata