angular-components
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a best-practice guide for Angular development (v19-v21). It consists entirely of documentation and code snippets for UI architecture and does not contain any executable scripts, shell commands, or obfuscated code.
- [CREDENTIALS_UNSAFE]: The skill provides patterns for handling authentication via functional interceptors. It correctly demonstrates security best practices by recommending OIDC with PKCE for SPAs and ensuring that bearer tokens are only attached to requests targeting the configured API base URL, preventing accidental token leakage to third-party domains.
- [DATA_EXFILTRATION]: No patterns for exfiltrating sensitive local data were found. The use of
HttpClientis documented for standard API interactions consistent with the skill's purpose as a UI development framework guide. - [COMMAND_EXECUTION]: The skill does not perform or suggest any arbitrary command execution. It lacks any dynamic context injection patterns (e.g.,
!commandsyntax).
Audit Metadata