any-type-elimination
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the 'grep' command to locate specific string patterns like ': any' and 'as any' within the project's source directory. This is a standard and safe operation for code analysis and refactoring.
- [COMMAND_EXECUTION]: The skill invokes 'npx tsc' to run the TypeScript compiler. This is the official and safe method for verifying types and identifying implicit 'any' occurrences in a TypeScript project.
- [PROMPT_INJECTION]: The skill processes user-controlled source code files, which creates a surface for indirect prompt injection if those files contain malicious instructions in comments.
- Ingestion points: Reads files with .ts and .tsx extensions from the 'src/' directory.
- Boundary markers: No explicit markers or instructions are provided to the agent to ignore instructions embedded in source code comments.
- Capability inventory: The agent is tasked with refactoring and modifying files on the local file system.
- Sanitization: There is no evidence of specific sanitization or filtering of the source code content before it is processed by the agent.
Audit Metadata