web-error-handling-result-types
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides code patterns for processing external data from multiple sources, representing a standard attack surface. Ingestion points: Network responses (fetch in examples/async.md), JSON strings (JSON.parse in examples/core.md), local storage (localStorage in examples/core.md), and environment variables (process.env in examples/combining.md). Boundary markers: The skill explicitly requires wrapping fallible calls in tryCatch or fromPromise at the point of ingestion to ensure all errors are handled as values. Capability inventory: Network requests via fetch, access to localStorage, and reading from process.env are documented. Sanitization: The skill provides extensive patterns for field-level validation and schema enforcement before data reaches business logic.
- [DATA_EXFILTRATION]: The skill includes an implementation of an API client using the fetch API for standard REST operations. These patterns are pedagogical and do not include hardcoded destinations, suspicious data collection, or sensitive credential exfiltration.
- [EXTERNAL_DOWNLOADS]: The skill's metadata references a schema from the author's official GitHub repository. This represents a standard configuration reference for metadata validation.
Audit Metadata