setup-pre-commit
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to install dependencies (
npm install) and initialize Husky (npx husky init). These are standard operations for setting up a JavaScript development environment and align with the skill's primary purpose. - [INDIRECT_PROMPT_INJECTION]: The skill reads the project's
package.jsonto identify available scripts for pre-commit hook configuration. - Ingestion points:
package.jsonfile content. - Boundary markers: None explicitly defined.
- Capability inventory: Shell command execution (
npm,npx), file system write access for configuration files (.husky/pre-commit,.lintstagedrc,.prettierrc), and git commit operations. - Sanitization: The instructions include logic to verify the existence of scripts before including them in the Husky configuration, mitigating issues with missing dependencies.
Audit Metadata