typescript-master
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The script executes the TypeScript compiler (
tsc) locally or vianpx. This is the intended purpose of the tool and is performed on local project files. - [EXTERNAL_DOWNLOADS] (SAFE): If
tscis not found locally, the script usesnpx tsc, which may download the package from the official npm registry. This is standard and expected behavior for Node.js development environments. - [DATA_EXPOSURE] (SAFE): The script reads project configuration (
tsconfig.json) and source files for the sole purpose of type checking. There is no evidence of sensitive data access or external exfiltration. - [DYNAMIC_EXECUTION] (SAFE): While the script dynamically determines the command to run the compiler (
TSC_CMD), it restricts this to known safe paths (global tsc, local node_modules, or npx).
Audit Metadata