hwc-navigation-content
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focuses on implementing standard UI navigation patterns using Turbo and Stimulus. All code snippets demonstrate legitimate usage of the Hotwire framework for pagination, tabbed navigation, and lazy loading.
- [SAFE]: Data processing in search features (e.g.,
references/2024-12-10-stimulus-turbo-frames-faceted-search.md) utilizes parameterized SQL queries in the Rails controller, effectively preventing SQL injection vulnerabilities. - [SAFE]: The skill provides patterns for processing user input in markdown previews and search forms. These represent common web development surfaces rather than malicious vectors.
- Ingestion points: Textarea in markdown preview and input fields in faceted search.
- Boundary markers: Standard form controls without specialized delimiters.
- Capability inventory: Triggers server-side rendering and frame content updates.
- Sanitization: Relies on framework defaults (e.g., Rails auto-escaping) and suggests using standard libraries like
markedorkramdown. - [SAFE]: External references to libraries such as
morphdomandgsaptarget well-known, established open-source projects. - [SAFE]: No hardcoded credentials, malicious persistence mechanisms, or unauthorized network operations were identified.
Audit Metadata