qwik
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Qwik framework and its dependencies using
npm create qwik@latestandnpm install. These are standard procedures for the well-known Qwik ecosystem. - [COMMAND_EXECUTION]: Uses routine development commands such as
npm run dev,npm run build, andnpm run deployto manage the application lifecycle. - [DATA_EXFILTRATION]: Correctly implements environment variable access via
env.get('API_URL')for network requests, avoiding hardcoded secrets and following secure configuration practices. - [PROMPT_INJECTION]: Indirect Prompt Injection Surface Analysis:
- Ingestion points: Untrusted data is retrieved from external APIs in
src/routes/articles/index.tsxand from user forms insrc/routes/articles/new/index.tsx. - Boundary markers: No explicit boundary markers are shown, which is standard for architectural documentation.
- Capability inventory: Network capabilities via the
fetchAPI are utilized for data synchronization. - Sanitization: Employs
zod$for rigorous schema validation and sanitization of incoming form data.
Audit Metadata