typed-structures
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/check-syntax.mjsscript utilizesspawnSyncto invoke theohmcommand-line tool, enabling automated syntax validation of Spore code blocks against the defined grammar. - [EXTERNAL_DOWNLOADS]: The skill documentation advises the global installation of the
@ohm-js/clipackage viapnpmto support its syntax-checking functionality. This targets a well-known package from a standard registry. - [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface by processing user-supplied notation designs, which are written to local temporary files for parsing. The skill's instructions explicitly separate syntax recognition from semantic proof, mitigating risks of logic confusion.
Audit Metadata