atelier-typescript-build-tools
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- [COMMAND_EXECUTION] (LOW): The skill includes boilerplate code for
vitestglobal setup usingnode:child_process.execSyncto run database migrations (drizzle-kit migrate). This is a standard development practice for integration testing and does not ingest untrusted input. - [EXTERNAL_DOWNLOADS] (LOW): Provides instructions for installing standard development dependencies (e.g.,
vitest,biome,turbo) from the public npm registry. No unverified third-party scripts or untrusted sources are utilized. - [DATA_EXFILTRATION] (INFO): References to
.envfiles and CI secrets (TURBO_TOKEN) are present. These follow standard security practices for managing environment-specific configurations and CI/CD secrets without exposing actual credentials.
Audit Metadata