web-meta-framework-qwik
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documentation provides patterns for ingesting and processing external data, which represents a standard vulnerability surface for indirect prompt injection if an agent were to process malicious content through these components.
- Ingestion points: Untrusted data enters the context through multiple vectors, including URL parameters (
requestEvent.params.userId), form inputs (onInput$,requestEvent.parseBody()), and cookies (requestEvent.cookie.get("session")) as documented inexamples/core.mdandexamples/routing.md. - Boundary markers: The skill does not explicitly define LLM-specific boundary markers or instructions to isolate processed external data from the agent's instructions.
- Capability inventory: The documented patterns include database interactions (
db.users.findById,db.posts.create), network data fetching (fetch), and server-side navigation control (requestEvent.redirect). - Sanitization: The documentation promotes the use of
zod$()for schema validation withinrouteAction$, which serves as a security best practice for ensuring data integrity.
Audit Metadata