typescript-lsp
Pass
Audited by Gen Agent Trust Hub on May 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a standard TypeScript Language Server integration using JSON-RPC over stdio, which is a secure and established pattern for development tools.
- [COMMAND_EXECUTION]: The skill uses the Bash tool to launch
typescript-language-servervia the Bun runtime. This is a restricted, standard operation required for the skill's primary function and does not involve arbitrary command execution or shell injection patterns. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill operates entirely on the local file system using provided paths. There are no network operations, external downloads, or attempts to access sensitive system directories or credentials.
Audit Metadata