axios
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE] (SAFE): The content is purely informational, serving as a guide for the Axios library. No malicious instructions, obfuscation, or behavior-altering prompts were identified.
- [NO_CODE] (SAFE): The skill consists entirely of a markdown documentation file and does not include any executable scripts, binaries, or automation tools.
- [DATA_EXFILTRATION] (SAFE): Code snippets demonstrate legitimate HTTP operations (GET, POST) which are the library's intended purpose. These examples use placeholders and do not target sensitive local system files or hardcoded credentials.
- [PROMPT_INJECTION] (SAFE): Indirect Prompt Injection Surface. The skill explains how to fetch data from external URLs, which is a potential surface for indirect injection. Evidence: 1. Ingestion points: axios.get response data. 2. Boundary markers: Not mentioned in snippets. 3. Capability inventory: Network communication and response processing. 4. Sanitization: Not demonstrated in basic examples.
Audit Metadata