xstate
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [SAFE]: The skill is a technical guide for using XState v5. It promotes high-quality software engineering practices, such as making state transitions explicit and verifiable, which helps prevent logic errors.- [EXTERNAL_DOWNLOADS]: The documentation references standard and official NPM packages for the XState ecosystem, such as
xstate,@xstate/react, and@xstate/store. These are legitimate libraries maintained by Stately.ai.- [REMOTE_CODE_EXECUTION]: The skill describes the use of@statelyai/inspectfor live visual debugging. The provided code snippet uses a dynamic import gated by a development environment check (import.meta.env.DEV), which is a secure and standard practice for excluding development tools from production bundles.- [DATA_EXFILTRATION]: While the skill explains how to persist and restore application state, it explicitly includes security warnings about treating persisted snapshots as a trust boundary and recommends schema-validating data before use.
Audit Metadata