svelte
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a toolchain reference for Svelte 5 development. It includes standard framework initialization commands (npm create svelte@latest) which utilize official and well-known tools in the JavaScript ecosystem.
- [SAFE]: External links point to official Svelte and Vercel documentation sites, which are recognized as trusted or well-known services.
- [SAFE]: The skill configuration explicitly disables model invocation (disable-model-invocation: true), reducing the potential attack surface by preventing the AI from executing the skill's instructions as a prompt.
- [INDIRECT_PROMPT_INJECTION]: The documentation includes examples of data ingestion from APIs (e.g., loading blog posts) and rendering content using the {@html} tag. This is documented for educational purposes to demonstrate framework features and is considered a low-risk pattern in this context.
Audit Metadata