vue-expert

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate technical documentation and workflow instructions for Vue 3 development. It follows industry best practices by recommending environment variables (e.g., process.env.SENTRY_AUTH_TOKEN) for sensitive configuration rather than hardcoding credentials.
  • [EXTERNAL_DOWNLOADS]: The skill references standard, widely-used packages and tools in the Vue ecosystem (e.g., Pinia, Nuxt, Quasar, Vite plugins). All suggested installations use official registries and established packages.
  • [COMMAND_EXECUTION]: Instructions include the use of standard development CLI tools such as npm, npx, and vue-tsc for project initialization, building, and type checking, which are expected in a professional developer workflow.
  • [INDIRECT_PROMPT_INJECTION]: As a coding assistant, the skill ingests user-provided code and requirements, creating an attack surface for indirect prompt injection, although no specific exploits are present.
  • Ingestion points: User-provided Vue components, project configurations, and application requirements (SKILL.md).
  • Boundary markers: None explicitly defined to separate developer instructions from potentially untrusted project data.
  • Capability inventory: The skill uses terminal-based validation and build commands (vite build, vitest, vue-tsc) as part of the core workflow (SKILL.md).
  • Sanitization: No specific input sanitization or validation routines for external code projects are described.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 11:05 PM