maintainable-typescript

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides several shell scripts in the scripts/ directory (e.g., audit-typescript-repo.sh, audit-typescript-dead-code.sh) designed to perform codebase analysis.
  • These scripts execute local binaries found within the target repository's node_modules/.bin/ directory, such as tsc, knip, jscpd, dependency-cruiser, and ast-grep.
  • The scripts/lib/common.sh helper script includes safety checks to ensure the target directory contains a package.json before proceeding with execution.
  • [EXTERNAL_DOWNLOADS]: The documentation and README.md suggest the manual installation of various third-party development tools from the NPM registry to enable the audit features. These are standard, well-known software engineering tools.
  • [SAFE]: The core of the skill consists of architectural doctrine and maintainability guidelines in Markdown format. The provided scripts are standard development helpers that do not perform network operations, exfiltration, or unauthorized persistence.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 09:02 PM