skills/aiskillstore/marketplace/pinia/Gen Agent Trust Hub

pinia

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references official and well-known repositories on GitHub, including the main Pinia repository and resources from established community developers. These references are informative and adhere to standard documentation practices for open-source libraries.\n- [EXTERNAL_DOWNLOADS]: Installation instructions utilize standard package managers to fetch official packages such as pinia, @pinia/nuxt, and @pinia/testing from public registries. These dependencies are expected and necessary for the stated purpose of the skill.\n- [DATA_EXFILTRATION]: The documentation includes code examples for action subscriptions that log execution details to the console for debugging. While these examples include function arguments, they represent standard development patterns for state tracking within a trusted library context.\n- [INDIRECT_PROMPT_INJECTION]: The skill documents state management patterns that ingest external data via store actions. 1. Ingestion points: Store state and action arguments (e.g., user inputs in login or registerUser actions). 2. Boundary markers: No explicit boundary markers are provided in the minimal code samples. 3. Capability inventory: As a documentation-focused skill, it provides no script-based execution capabilities or tools that could be abused by malicious data. 4. Sanitization: The skill correctly recommends using the devalue library for XSS-safe serialization during server-side rendering.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:44 PM