angular-fundamentals
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill promotes security best practices in
references/configuration.mdby explicitly warning developers never to include secrets such as API keys, client secrets, or connection strings in frontend code or configuration files, as they are visible to end users via browser developer tools. - [COMMAND_EXECUTION]: In
references/angular-version.md, the skill provides instructions for resolving the target Angular version by executingnpm view @angular/core dist-tags.latest. This is a routine operation for retrieving package metadata from the official NPM registry, a well-known service. - [INDIRECT_PROMPT_INJECTION]: The version resolution logic described in
references/angular-version.mdinvolves reading repository files likepackage.jsonand lockfiles. While these are external ingestion points for data, the skill's logic is restricted to extracting version strings and does not provide a path for instruction execution from these sources.
Audit Metadata