review-vue
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to perform a framework-specific review of Vue 3 source code, focusing on Composition API, Pinia state management, and component design patterns.
- [SAFE]: No network-related operations (such as curl, wget, or fetch) or external data transmissions are requested or implemented in the skill files.
- [SAFE]: The skill does not access sensitive system paths, environment variables, or hardcoded credentials. It operates strictly on the code scope provided as input.
- [SAFE]: The skill explicitly defines its boundaries, stating that it does not perform security analysis (e.g., XSS detection) or architecture reviews, directing users to dedicated skills for those purposes instead.
- [SAFE]: Although the skill processes external code files (an indirect prompt injection surface), it lacks the high-privilege capabilities (such as subprocess execution, file-writing, or remote network calls) necessary to escalate such an injection into a security breach.
Audit Metadata