typescript-refactoring
Pass
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing and using reputable development tools such as
@biomejs/biomeandoxlintfrom official package registries.\n- [COMMAND_EXECUTION]: The instructions guide the agent to perform standard development tasks using shell commands, includingnpm test,npx oxlint .,npx @biomejs/biome check, andgit commit.\n- [PROMPT_INJECTION]: The skill documentation creates a surface for indirect prompt injection by instructing the agent to ingest untrusted data (source code) and then execute powerful commands.\n - Ingestion points: The agent is instructed to read and explore codebase files in
references/02-planning-workflow.md.\n - Boundary markers: No instructions are provided to use delimiters or to ignore potential instructions found within the code being analyzed.\n
- Capability inventory: The agent is granted capabilities to execute subprocess commands for testing, linting, and version control as described in
references/20-cheatsheet.md.\n - Sanitization: No sanitization or validation of the ingested code content is specified before processing.
Audit Metadata