typescript-and-lint-rules
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The utility script
scripts/check-lib.mjscontains arunNodehelper that usesnode:child_process(spawnSync) to execute the skill's own analysis scripts during self-tests. This is used byscripts/selftest.mjsto verify that the checkers correctly identify both good and bad coding patterns in fixture directories. - [COMMAND_EXECUTION]: The
applyMutationfunction inscripts/check-lib.mjsprovides a mechanism for programmatically creating, modifying, and deleting files within test fixture folders. This logic includes path validation (insidePath) to prevent directory traversal and is used exclusively for preparing test environments. - [DYNAMIC_EXECUTION]: The
importPackagefunction inscripts/check-lib.mjsuses dynamicimport()to load Node.js modules from a local tooling directory. This is used to load specific versions of analysis tools during the validation process and does not interact with remote or untrusted code sources.
Audit Metadata