umbraco-modals
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [General] (SAFE): The skill is well-structured and focuses on assisting developers with Umbraco CMS extensions. It provides code snippets for Modal Tokens and Elements that follow official Umbraco patterns.
- [Data Exposure & Exfiltration] (SAFE): No sensitive data access or exfiltration patterns were detected. The use of
WebFetchis constrained to official documentation domains (docs.umbraco.com). - [Indirect Prompt Injection] (LOW): The skill implements a workflow that fetches external documentation to inform code generation.
- Ingestion points: Documentation URLs under
docs.umbraco.comviaWebFetch. - Boundary markers: Not explicitly defined in the prompt templates.
- Capability inventory:
Read,Write, andEditpermissions are requested to create and modify local project files. - Sanitization: Relies on the agent's internal filtering when processing documentation content.
- Assessment: Risk is minimal as the sources are restricted to official vendor documentation.
Audit Metadata