nuqs-v2
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of educational content and code examples for a well-known library. Analysis of the instructions and code snippets revealed no malicious logic, unauthorized data access, or persistence mechanisms.\n- [INDIRECT_PROMPT_INJECTION]: The skill documents the handling of URL parameters, which are external data sources. It proactively addresses security by providing rules for sanitization.\n
- Ingestion points: URL search parameters ingested through client-side hooks and server-side caches.\n
- Boundary markers: The instructions emphasize the use of default values and strict type enforcement.\n
- Capability inventory: The code is limited to updating URL state and triggering React transitions; no dangerous system or network capabilities are utilized.\n
- Sanitization: The skill mandates the use of Standard Schema validators (such as Zod) to verify the integrity and structure of incoming URL data.\n- [REMOTE_CODE_EXECUTION]: The documentation includes standard package installation commands for development purposes, which are expected and safe within this context.
Audit Metadata