nuxt-modules
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS] (SAFE): The skill references standard developer tools and registries (npm, pnpm, npx) and specific utility packages like
pkg-pr-newandchangelogithub. These are used for their intended purposes within a development environment. - [COMMAND_EXECUTION] (SAFE): The documented commands (
pnpm install,npx nuxi init,pnpm test) are standard operations for JavaScript and Nuxt developers. - [CREDENTIALS_UNSAFE] (SAFE): The skill provides examples of configuring API keys but uses safe placeholders (e.g., 'xxx'). More importantly, it explicitly guides users to set up 'Trusted Publishing' (OIDC), which is a high-security alternative to hardcoding npm tokens in CI environments.
- [DYNAMIC_EXECUTION] (SAFE): Uses dynamic imports for lazy-loading bundler plugins (
addVitePlugin(() => import(...))). This is a documented and standard pattern for Nuxt module performance and does not involve untrusted remote code.
Audit Metadata