NYC

react-native-web-performance

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • Prompt Injection (SAFE): No instructions found that attempt to override system behavior or bypass safety filters.
  • Data Exposure & Exfiltration (SAFE): No hardcoded credentials or sensitive file paths were identified.
  • Obfuscation (SAFE): Content is clear and readable with no encoded strings or hidden characters.
  • Remote Code Execution (SAFE): The skill does not perform remote script execution or download untrusted external dependencies.
  • Indirect Prompt Injection (LOW): As a resource for code generation, there is a theoretical surface for indirect injection if an agent interpolates untrusted user data into these templates, but the skill itself contains no malicious patterns. Evidence: 1. Ingestion points: None (static content); 2. Boundary markers: N/A; 3. Capability inventory: Bash, Write, Edit, Grep, Glob; 4. Sanitization: N/A.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:05 PM