phoenix-typescript-package-docs

Pass

Audited by Gen Agent Trust Hub on Apr 12, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute a local Node.js script js/scripts/sync-package-docs.mjs and the standard npm pack command. These are internal project tools used for documentation synchronization and package verification.
  • [DATA_EXPOSURE]: The instructions involve reading local source code files in js/packages/*/src/ and documentation files in docs/ to ensure documentation accuracy. No sensitive files (credentials, SSH keys) are accessed.
  • [PROMPT_INJECTION]: The skill uses specific HTML patterns (data-agent-context) to embed hidden implementation details for other agents. This is a design pattern for providing metadata in documentation and does not attempt to override safety filters or bypass agent constraints.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 12, 2026, 01:36 AM