web-data-fetching-swr
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [SAFE]: The skill provides documentation and code examples for SWR, a standard React library for data fetching. All external links point to official Vercel documentation and GitHub repositories.
- [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for fetching data from external API endpoints (e.g., in lib/fetcher.ts and examples/mutations.md). * Ingestion points: JSON responses from fetch calls are processed and rendered by React components. * Boundary markers: None explicitly defined in the provided code snippets to distinguish external content from prompt context. * Capability inventory: Network requests via fetch and UI rendering of fetched content. * Sanitization: Uses standard methods like encodeURIComponent for search queries.
- [DATA_EXFILTRATION]: The caching example (examples/caching.md) includes a pattern for persisting application state to localStorage. This pattern stores fetched application data in the browser's persistent storage, which is accessible to scripts within the same origin.
Audit Metadata