avue

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • SAFE (SAFE): The skill is entirely composed of Markdown files containing documentation and template examples. It contains no executable scripts (Python, JS, Shell) that would run automatically in the agent's environment.\n- EXTERNAL_DOWNLOADS (SAFE): The installation instructions reference the legitimate '@smallwei/avue' package on npm, which is the official repository for the framework.\n- DATA_EXFILTRATION (SAFE): While the API documentation mentions utility functions like 'downFile' and '$Export', these are standard front-end framework features for user-initiated data handling in a web browser context.\n- DYNAMIC_EXECUTION (SAFE): The documentation lists a 'loadScript' utility as part of the framework's Global API. This is presented as reference material for developers and does not represent an active threat within the skill itself.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 05:52 PM