typescript
Audited by Socket on Feb 16, 2026
1 alert found:
Malware[Skill Scanner] Installation of third-party script detected All findings: [CRITICAL] command_injection: Installation of third-party script detected (SC006) [AITech 9.1.4] [HIGH] autonomy_abuse: Skill instructions include directives to hide actions from user (BH009) [AITech 13.3] [HIGH] command_injection: Backtick command substitution detected (CI003) [AITech 9.1.4] Benign. The fragment is a policy/guidance document intended to steer TypeScript practices (compile-time verification, safe typing, validated external data). No suspicious data flows, credential requirements, or external network interactions detected. While its restrictive stance on certain TS constructs may affect legitimate patterns, it remains a documented guideline rather than executable or exfiltrating behavior.