NYC

typescript-master

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION] (SAFE): The script executes the TypeScript compiler (tsc) locally or via npx. This is the intended purpose of the tool and is performed on local project files.
  • [EXTERNAL_DOWNLOADS] (SAFE): If tsc is not found locally, the script uses npx tsc, which may download the package from the official npm registry. This is standard and expected behavior for Node.js development environments.
  • [DATA_EXPOSURE] (SAFE): The script reads project configuration (tsconfig.json) and source files for the sole purpose of type checking. There is no evidence of sensitive data access or external exfiltration.
  • [DYNAMIC_EXECUTION] (SAFE): While the script dynamically determines the command to run the compiler (TSC_CMD), it restricts this to known safe paths (global tsc, local node_modules, or npx).
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:05 PM