error-handling-typed-results
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The helper library
scripts/check-lib.mjsutilizes theimport()function to dynamically load Node.js modules from computed file paths. This is used by theimportPackagefunction to load pinned dependencies required for the skill's auditing tasks. - [COMMAND_EXECUTION]: The skill's verification and self-testing framework in
scripts/check-lib.mjsandscripts/selftest.mjsusesspawnSyncto execute Node.js scripts. This is a functional requirement for running and testing the auditing logic against fixtures. - [INDIRECT_PROMPT_INJECTION]: The auditing scripts
check-error-spine.mjsandcheck-error-net.mjsperform automated scans of the user's source code and configuration files. This creates a surface for indirect prompt injection where malicious content within a project being analyzed could attempt to influence the AI agent's behavior. - Ingestion points: Project source files (
.ts,.tsx,.json) are read into memory usingreadFileSyncin the analysis scripts. - Boundary markers: Absent; the tools perform regex-based heuristic scans on raw file content.
- Capability inventory: The skill possesses capabilities to write files (
writeFileSync), execute subprocesses (spawnSync), and load external code (import()). - Sanitization: Absent; analyzed code snippets may be included in problem reports generated by the tool.
Audit Metadata