progressive-web-app
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implementation includes surfaces for untrusted data ingestion through standard web features.
- Ingestion points: Processes external push notification payloads in
references/push-notifications.mdand user-provided notes inreferences/offline-support-with-indexeddb.md. - Boundary markers: Does not include explicit delimiters or instructions to ignore embedded commands within ingested data, which is standard for this architectural pattern.
- Capability inventory: Demonstrates capabilities for network communication (
fetch) and local persistence (IndexedDB) as part of its core PWA functionality. - Sanitization: Uses basic default values for notification fields but does not implement explicit data sanitization in these boilerplate examples.
- [EXTERNAL_DOWNLOADS]: Mentions standard third-party dependencies for web development.
- References the
idblibrary for database management inreferences/offline-support-with-indexeddb.md, which is an industry-standard package for IndexedDB interactions.
Audit Metadata