typescript-expert
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard development commands such as
npx tsc,npm test, andnodeto diagnose project issues and validate code. These commands are localized to the project environment and are routine for this domain. - [EXTERNAL_DOWNLOADS]: The instructions and the
ts_diagnostic.pyscript utilizenpxto run various TypeScript-related tools (e.g.,vitest,ts-migrate,typesync). These downloads originate from the well-known npm registry and are standard for development workflows. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes project files such as
package.jsonand source code. Ingestion points: Project configuration files (package.json,tsconfig.json) and source files in thesrc/directory. Boundary markers: None explicitly defined to separate instructions from code data. Capability inventory: Execution of shell commands vianpx,npm, andnode. Sanitization: The skill does not perform explicit validation or sanitization of project file contents before analysis.
Audit Metadata