progressive-web-app
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface detected in the provided PWA templates.\n
- Ingestion points:
references/service-worker-implementation.md(intercepting network fetch events) andreferences/push-notifications.md(handling data from push notification payloads).\n - Boundary markers: No delimiters or explicit instructions to treat incoming network data as untrusted are included in the template code.\n
- Capability inventory: The templates use
fetchfor network operations,IndexedDBfor local storage, andCacheStoragefor managing offline resources.\n - Sanitization: No data sanitization or validation logic is present in the snippets for processing data received from external API endpoints or push services.
Audit Metadata