implementing-drag-drop
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard React implementation patterns for drag-and-drop interfaces using established and reputable libraries including @dnd-kit and react-dropzone. Code examples follow best practices for frontend development and accessibility.
- [INDIRECT_PROMPT_INJECTION]: Vulnerability Surface Analysis: 1. Ingestion points: The skill processes external data through file upload metadata (examples/file-dropzone.tsx) and user-defined task content in Kanban components (examples/kanban-board.tsx). 2. Boundary markers: Not explicitly used in the UI rendering logic. 3. Capability inventory: The skill does not implement any dangerous capabilities such as shell command execution, sensitive file system writes, or unauthorized network operations. 4. Sanitization: Data is rendered via React JSX which provides built-in protection against cross-site scripting (XSS) via automatic string escaping. The surface is standard for interactive UI components.
Audit Metadata