accelint-ts-audit-all
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs shell command execution to manage isolated audit environments and verify code quality.
- Evidence: The workflow in
SKILL.mdutilizesgit worktree add,git checkout, andgit mergeto create a dedicated workspace for auditing, preventing direct modification of the main branch. - Evidence:
SKILL.mdinstructs the agent to execute project-specific verification commands, such asnpm test,npm run build, andnpm run lint, which are defined by the user or project configuration. - Evidence: A shell loop is used in
SKILL.mdto run tests 100 times to verify the stability of property-based tests. - [PROMPT_INJECTION]: The skill's architecture is susceptible to indirect prompt injection due to its processing of external code files.
- Ingestion points: The skill accepts a file or directory path and reads TypeScript source files as input for analysis, as described in
README.md. - Boundary markers: The skill implements an 'Interactive Change Approval Pattern' that presents a summary table and detailed code diffs to the user before applying changes, acting as a manual check.
- Capability inventory: The skill possesses file system write access (creating tracking files in
.agents/audit/), git command execution, and the ability to run arbitrary project scripts. - Sanitization: No specific sanitization of the audited file content is mentioned; the safety of the operation relies on the human-in-the-loop approval process.
Audit Metadata