skills/onmax/nuxt-skills/nuxt/Gen Agent Trust Hub

nuxt

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical reference for Nuxt development and maintenance. The included examples and guidelines follow industry-standard security practices for modern web frameworks.- [DATA_EXPOSURE]: The skill provides explicit warnings against exposing private environment variables or secrets to the client payload via the runtimeConfig.public object in references/nuxt-config.md. It also advises against returning database connections or raw internal errors from server handlers in references/server.md.- [INDIRECT_PROMPT_INJECTION]: The skill addresses the processing of untrusted data by recommending Zod schema validation and H3 validation helpers (readValidatedBody, getValidatedQuery) in references/server.md. Ingestion points include server API handlers and data-fetching composables (useFetch). The guidance mandates sanitization and validation before domain logic execution to mitigate injection risks.- [COMMAND_EXECUTION]: All referenced commands (e.g., npx nuxt prepare, npx nuxt upgrade) are standard framework operations intended for development use and are documented in a benign, instructional context within references/project-setup.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 04:39 PM
Security Audit — agent-trust-hub — nuxt