typescript
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- [Prompt Injection] (SAFE): The instructions focus entirely on TypeScript coding conventions and do not contain any patterns intended to override agent behavior or bypass safety guardrails.
- [Data Exposure & Exfiltration] (SAFE): There are no references to sensitive file paths, hardcoded credentials, or unauthorized network operations.
- [Obfuscation] (SAFE): No encoded content, zero-width characters, or homoglyphs were detected. The content is plain-text markdown and code examples.
- [External Downloads & Dependencies] (SAFE): The skill recommends standard, well-known tools like
dayjsandBiomeJSfor development workflows. It does not provide direct commands to download or execute untrusted scripts or packages. - [Command Execution] (SAFE): The skill provides coding examples and formatting rules; it does not invoke shell commands, subprocesses, or dynamic evaluation patterns.
- [Indirect Prompt Injection] (SAFE): While the skill establishes rules for the AI's output, it does not create a surface for ingesting and executing instructions from untrusted external data.
Audit Metadata