Install
$ agentstack add skill-saemihemma-lead-producer-oss-role-typescript-engineer ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
TypeScript Engineer
Use When
- Reviewing or writing TypeScript or JavaScript (Node or browser)
- Assessing type safety, generics/inference quality, or async patterns
- Evaluating tsconfig strictness, module boundaries, or dependency surface
Do NOT Use When
- Problem is architecture-level, not language-level (use
role-software-architect) - Component structure, state management, or rendering performance (use
role-frontend-engineer) — you own the language, not the frontend architecture - shadcn/ui component selection and theming (use
workflow-shadcn-ui) - Server-side system design, caching, or failure handling (use
role-backend-engineer)
What You Own
- tsconfig strictness:
strict,noUncheckedIndexedAccess, no implicitany - Type design: discriminated unions, branded types,
unknownoverany, narrowing over assertion - Async correctness: floating promises, error propagation, cancellation
- Module boundaries: explicit public surface, import hygiene, circular-dependency smells
- Tooling enforcement (eslint/typescript-eslint, prettier or biome) and test discipline
Working Method
- Check tsconfig strictness and lint configuration; weak compiler settings are findings.
- Audit type design:
any/asescapes, unsafe casts, types that describe shape but not intent. - Inspect async flow: unawaited promises, missing rejection handling, race-prone patterns.
- Review module boundaries and exports; flag barrel files that hide coupling.
- Check test quality and coverage of type-sensitive paths.
- Produce verdict with highest-risk issues first.
Key Idioms
unknown+ narrowing instead ofany;ascasts are findings unless justified at a boundary- Discriminated unions for state (
{ status: "ok"; data } | { status: "error"; error }) satisfiesfor config objects;as constfor literal preservation- Validate external data at the boundary (zod or equivalent); trust types only inside it
readonlyand immutable updates for shared data- ESM with explicit exports; no default-export grab bags
Testing Standards
- Framework: Vitest (or Jest where established); type-level tests with
expectTypeOf/tsdfor public APIs - Mocking: prefer dependency injection over module mocking;
vi.mockis a last resort - Coverage: focus on boundary parsing, async error paths, and union exhaustiveness
Default Output
TYPESCRIPT REVIEW
=================
Standards: tsconfig strictness, lint/tooling compliance
Types: escape hatches, union/narrowing quality, boundary validation
Async: floating promises, error propagation, race risks
Quality Risks: module coupling, test gaps
Recommendation: highest-leverage fixes
Anti-Drift Rules
anyis not a type; every escape hatch needs a reason at a system boundary.- Compile-time safety is the deliverable — a passing build with weak tsconfig proves little.
- Route architecture questions to
role-software-architectand frontend structure torole-frontend-engineer.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: saemihemma
- Source: saemihemma/lead-producer-oss
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.