typed-structures

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/check-syntax.mjs script utilizes spawnSync to invoke the ohm command-line tool, enabling automated syntax validation of Spore code blocks against the defined grammar.
  • [EXTERNAL_DOWNLOADS]: The skill documentation advises the global installation of the @ohm-js/cli package via pnpm to support its syntax-checking functionality. This targets a well-known package from a standard registry.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface by processing user-supplied notation designs, which are written to local temporary files for parsing. The skill's instructions explicitly separate syntax recognition from semantic proof, mitigating risks of logic confusion.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 03:23 AM