pretext
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely informational and instructional, providing API references and implementation examples for a legitimate text-layout library.
- [EXTERNAL_DOWNLOADS]: The documentation mentions the installation of the
@chenglou/pretextpackage from the official npm registry. - [INDIRECT_PROMPT_INJECTION]: As the skill is designed to process and measure text, it inherently handles untrusted data strings. However, the library's primary function is arithmetic layout and measurement, which does not involve executing the input or interpreting it as instructions.
- [COMMAND_EXECUTION]: The development documentation lists various
buncommands for testing, benchmarking, and building the library. These are standard developer operations and do not represent a security risk within the context of the skill's purpose.
Audit Metadata