nuxt
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for Nuxt development and maintenance. The included examples and guidelines follow industry-standard security practices for modern web frameworks.- [DATA_EXPOSURE]: The skill provides explicit warnings against exposing private environment variables or secrets to the client payload via the
runtimeConfig.publicobject inreferences/nuxt-config.md. It also advises against returning database connections or raw internal errors from server handlers inreferences/server.md.- [INDIRECT_PROMPT_INJECTION]: The skill addresses the processing of untrusted data by recommending Zod schema validation and H3 validation helpers (readValidatedBody,getValidatedQuery) inreferences/server.md. Ingestion points include server API handlers and data-fetching composables (useFetch). The guidance mandates sanitization and validation before domain logic execution to mitigate injection risks.- [COMMAND_EXECUTION]: All referenced commands (e.g.,npx nuxt prepare,npx nuxt upgrade) are standard framework operations intended for development use and are documented in a benign, instructional context withinreferences/project-setup.md.
Audit Metadata