typescript-coding-standards

Pass

Audited by Gen Agent Trust Hub on Mar 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The SessionStart hook executes yq to read project-specific coding standards from .claude/config.yaml. This is used to display the standards to the agent context.\n- [COMMAND_EXECUTION]: The PostToolUse hook executes npx eslint on modified JavaScript and TypeScript files to automate code quality checks.\n- [EXTERNAL_DOWNLOADS]: The use of npx eslint may result in the download of the ESLint package from the official npm registry if it is not already present.\n- [PROMPT_INJECTION]: The skill processes local project files, which serves as a potential surface for indirect prompt injection.\n
  • Ingestion points: .claude/config.yaml and source files.\n
  • Boundary markers: None present.\n
  • Capability inventory: yq, npx eslint.\n
  • Sanitization: No sanitization is performed on the command output.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 16, 2026, 01:38 AM