typescript-pro

Pass

Audited by Gen Agent Trust Hub on Feb 16, 2026

Risk Level: LOW
Full Analysis
  • Prompt Injection (SAFE): No instructions to bypass filters or reveal system prompts were found.
  • Data Exposure & Exfiltration (SAFE): No sensitive file paths, hardcoded secrets, or network exfiltration patterns are present.
  • Remote Code Execution (SAFE): No remote scripts or binary downloads are triggered; the skill relies on local reference files.
  • Obfuscation (SAFE): No Base64, zero-width characters, or encoded commands are present in the skill body.
  • Indirect Prompt Injection (LOW): The skill is designed to ingest user requirements to generate TypeScript code (Ingestion point: user prompts). While it lacks explicit boundary markers or sanitization, its capabilities are restricted to code generation for display (Capability: output-format: code) without the power to execute commands or reach the network.
Audit Metadata
Risk Level
LOW
Analyzed
Feb 16, 2026, 12:50 PM