vue-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of markdown documentation providing guidance on Vue 3, TypeScript, and Vite configuration. No executable scripts, binaries, or automated capabilities are included that could pose a security risk.
- [EXTERNAL_DOWNLOADS]: The skill contains references to official Vue.js documentation, community-standard tools (like Vite and Pinia), and GitHub repositories. These are well-known resources within the web development ecosystem and are used here exclusively for educational and reference purposes.
- [COMMAND_EXECUTION]: Shell commands mentioned in the documentation (e.g.,
npm install,cat tsconfig.json) are presented within markdown code blocks as instructions for the developer to follow manually. There is no evidence of these commands being executed automatically by the agent. - [METADATA_POISONING]: While there is a minor discrepancy in metadata (e.g., different authors and versions between
SKILL.mdandskill-report.json), this appears to be a documentation artifact rather than a deceptive attempt to hide malicious behavior.
Audit Metadata