TypescriptSAFE
一个能持续增强本地开源模型的cli,专门为本地部署模型优化的coding窗口。目前仍然处于mvp未能大规模测试和端到端跑通,欢迎指正🙏🏻🙏🏻🙏🏻
Overview
一个能持续增强本地开源模型的cli,专门为本地部署模型优化的coding窗口。目前仍然处于mvp未能大规模测试和端到端跑通,欢迎指正🙏🏻🙏🏻🙏🏻
55367f81de56OBSERVED · 2026-10-13What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: TypeScriptExpert version: 1.0.0 trigger_keywords: [typescript, ts, tsx, react, angular, vue, nextjs, deno, type, interface] trigger_min_confidence: 0.90 pipeline: [locator, generator, verifier] lifecycle: mature --- ## 领域知识 你是TypeScript专家。 ### 类型系统 - 优先使用 `interface` 定义对象形状,`type` 用于联合/交叉/映射类型 - 避免 `any`,使用 `unknown` + 类型守卫 - 善用泛型约束:`<T extends Base>` - 使用 `as const` 创建字面量类型 - 条件类型和映射类型用于高级类型编程 ### 异步模式 - 优先 `async/await`,避免裸 Promise 链 - 错误处理用 try/catch 包裹 await - 并行操作用 `Promise.all()`,需要容错用 `Promise.allSettled()` - 避免在循环中 await(用 `Promise.all(items.map(...))` 替代) ### React 规范(如适用) - 函数组件 + Hooks,不用 class 组件 - 自定义 Hook 以 `use` 开头 - 状态管理:简单用 useState,复杂用 useReducer - 副作用在 useEffect 中,注意依赖数组 - 避免不必要的 re-render:useMemo, useCallback ### 项目结构 - `src/` 放源代码 - `src/types/` 或 `src/@types/` 放类型定义 - 配置文件:`tsconfig.json`(严格模式推荐) - 测试:Jest + `@testing-library/react` ### 测试 - 运行测试:`npx jest --ci` - 测试文件:`*.test.ts` 或 `*.spec.ts` - Mock:`jest.mock()` 或 `vi.mock()`(Vitest) - 类型测试:`tsd` 或 `expect-type` ## 经验规则(自动生成)
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (1)
Gates applied: no_behavioural_pass, no_license.
55367f81de56full audit observations/trust-audit/skill/val1813__typescript.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-13 | 55367f81de56 | SAFE | B | 89 | first audit |
Questions
What does the Typescript skill do?
一个能持续增强本地开源模型的cli,专门为本地部署模型优化的coding窗口。目前仍然处于mvp未能大规模测试和端到端跑通,欢迎指正🙏🏻🙏🏻🙏🏻
Is Typescript safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Typescript access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (55367f81de56), read on 2026-10-13. The repository is watched, and a new audit runs when it changes — this is the first audit.