skilld
All skills
paulrberg avatar

/code-polish

@ccfca26
by Paul Bergpaulrberg/agent-skills94 stars
7

Polish changed code when the user explicitly asks, or when an active workflow requests post-implementation simplification and risk-profiled review over a fixed file scope.

Ask your Agent

Use this Skill: https://skilld.dev/gh/paulrberg/agent-skills/code-polish

This session only. Nothing lands on disk.

referencesprofilestypescript.md

≈218 tokens on demand. Your agent reads this file only when SKILL.md points to it.

TypeScript Profile

Load when the diff touches TypeScript source, declarations, compiler config, package metadata, or generated types.

Checks

  • TS-001 Unsafe boundary typing (HIGH): any, assertions, or unchecked generics hide invalid external data.
  • TS-002 Unhandled async failure (HIGH): missing await, .catch, return, or error propagation drops failures.
  • TS-003 Async ordering bug (HIGH): concurrent operations can overwrite newer state or observe stale data.
  • TS-004 Module/tool drift (MEDIUM): tsconfig, package metadata, generated types, or lockfiles change inconsistently.
  • TS-005 Lifecycle leak (MEDIUM): timers, listeners, subscriptions, or caches outlive their owner.

Evidence Expectations

  • Show the invalid input, async timeline, or ownership path.
  • Name the narrow TypeScript command that proves the finding.

Source: SKILL.md on GitHub

Third-party checks

1 warningtoday5 checks · Risk SAFE
  • Gen Agent Trust Hubtoday

    The skill is a code analysis and simplification tool that operates on local Git repositories. It uses various language-specific profiles to identify defects and suggest improvements. The primary security consideration is that the skill processes untrusted code changes and possesses the capability to execute shell commands (e.g., tests, linters, and formatters), making it a potential target for indirect prompt injection where malicious instructions in the code could influence the agent's behavior.

  • Sockettoday

    No alerts

  • Snyktoday

    Risk: LOW · No issues

  • Runlayer7mo

    1/1 file flagged

  • ZeroLeaks5mo

    1 finding · Score: 86/100

Provenance

Signed by skilld at ccfca26. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub yesterday.

Activeupdated last week

Capability

argument-hint
[paths] [--simplify] [--review] [--with-profile <name>] [--skip-profile <name>]

README badge

README badge for paulrberg/agent-skills/code-polish