async-safety
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes Node.js scripts located in the
scripts/directory, notablycheck-async-safety.mjsandselftest.mjs. These scripts are intended for local execution to perform static analysis of application source code and to verify the checker's own logic against included fixture files. The self-test mechanism usesspawnSyncto run the checker in a controlled, local environment. - [DYNAMIC_EXECUTION]: The shared helper script
scripts/check-lib.mjscontains logic to dynamically import Node.js packages from a tooling directory. This is used to load dependencies required for specific utility tasks, such as fixture generation, only when needed. - [SAFE]: The skill's primary purpose is to provide developer tooling and best practices for asynchronous safety. It utilizes standard static analysis techniques (regex-based scanning) to audit code patterns like
useEffectcleanups,AbortSignalusage, and promise handling. No malicious patterns, such as data exfiltration or credential theft, were detected.
Audit Metadata