vue
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read the project's
node_modules/vue/package.jsonor lockfiles to determine the Vue version. While this involves ingesting external data, the process is limited to extracting a version string to select local documentation files within the skill. No exploitable capabilities or dangerous data processing chains were identified. - Ingestion points:
node_modules/vue/package.jsonand project lockfiles. - Boundary markers: Not explicitly defined for version extraction.
- Capability inventory: The skill does not invoke shell commands, perform network operations, or write to the file system.
- Sanitization: Not present, as the input is used only for internal logic to select version-appropriate documentation.
Audit Metadata