nuqs
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE] (SAFE): All analyzed files (README.md, AGENTS.md, and 42 reference rules) contain legitimate technical guidance and code examples for the nuqs library. No malicious instructions or hidden payloads were found.- [Indirect Prompt Injection] (SAFE): The skill deals with untrusted data (URL parameters) but provides robust countermeasures. Evidence chain: 1. Ingestion points: URL search params via useQueryState and createSearchParamsCache. 2. Boundary markers: Enforced through the use of parsers with defaults. 3. Capability inventory: UI state updates and server-side data fetching. 4. Sanitization: Rules like parser-enum-validation and parser-json-validation provide explicit sanitization patterns.- [Command Execution] (LOW): The documentation contains standard shell commands for project setup (pnpm install, pnpm build). These are non-malicious and follow standard developer workflows.
Audit Metadata