typescript-lsp

Pass

Audited by Gen Agent Trust Hub on May 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a standard TypeScript Language Server integration using JSON-RPC over stdio, which is a secure and established pattern for development tools.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to launch typescript-language-server via the Bun runtime. This is a restricted, standard operation required for the skill's primary function and does not involve arbitrary command execution or shell injection patterns.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill operates entirely on the local file system using provided paths. There are no network operations, external downloads, or attempts to access sensitive system directories or credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
May 28, 2026, 07:05 AM
Security Audit — agent-trust-hub — typescript-lsp