typescript-and-lint-rules

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The utility script scripts/check-lib.mjs contains a runNode helper that uses node:child_process (spawnSync) to execute the skill's own analysis scripts during self-tests. This is used by scripts/selftest.mjs to verify that the checkers correctly identify both good and bad coding patterns in fixture directories.
  • [COMMAND_EXECUTION]: The applyMutation function in scripts/check-lib.mjs provides a mechanism for programmatically creating, modifying, and deleting files within test fixture folders. This logic includes path validation (insidePath) to prevent directory traversal and is used exclusively for preparing test environments.
  • [DYNAMIC_EXECUTION]: The importPackage function in scripts/check-lib.mjs uses dynamic import() to load Node.js modules from a local tooling directory. This is used to load specific versions of analysis tools during the validation process and does not interact with remote or untrusted code sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 11:23 AM