vue
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- Prompt Injection (SAFE): No instructions attempting to override agent behavior or safety filters were detected.
- Data Exposure & Exfiltration (SAFE): No hardcoded secrets, sensitive file paths, or unauthorized network exfiltration patterns were found. Code examples using fetch are standard web development patterns in the context of a frontend framework.
- Obfuscation (SAFE): No Base64, zero-width characters, or other encoding techniques intended to hide malicious content were found.
- Unverifiable Dependencies & Remote Code Execution (SAFE): The skill does not include any executable scripts, package manager files, or remote code download patterns.
- Privilege Escalation (SAFE): No commands for elevating system privileges (e.g., sudo, chmod) were detected.
- Persistence Mechanisms (SAFE): No attempts to modify shell profiles, cron jobs, or startup services were found.
- Metadata Poisoning (SAFE): Metadata accurately reflects the content and purpose of the skill.
- Indirect Prompt Injection (SAFE): The skill primarily serves as a reference and does not ingest untrusted external data that could influence agent behavior.
- Time-Delayed / Conditional Attacks (SAFE): No logic gating behavior based on time or environment conditions was detected.
- Dynamic Execution (SAFE): No use of eval, exec, or dynamic code generation was found.
Audit Metadata