typescript-coding-standards
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
SessionStarthook executesyqto read project-specific coding standards from.claude/config.yaml. This is used to display the standards to the agent context.\n- [COMMAND_EXECUTION]: ThePostToolUsehook executesnpx eslinton modified JavaScript and TypeScript files to automate code quality checks.\n- [EXTERNAL_DOWNLOADS]: The use ofnpx eslintmay result in the download of the ESLint package from the official npm registry if it is not already present.\n- [PROMPT_INJECTION]: The skill processes local project files, which serves as a potential surface for indirect prompt injection.\n - Ingestion points:
.claude/config.yamland source files.\n - Boundary markers: None present.\n
- Capability inventory:
yq,npx eslint.\n - Sanitization: No sanitization is performed on the command output.
Audit Metadata