angular-fundamentals

Pass

Audited by Gen Agent Trust Hub on Aug 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill promotes security best practices in references/configuration.md by explicitly warning developers never to include secrets such as API keys, client secrets, or connection strings in frontend code or configuration files, as they are visible to end users via browser developer tools.
  • [COMMAND_EXECUTION]: In references/angular-version.md, the skill provides instructions for resolving the target Angular version by executing npm view @angular/core dist-tags.latest. This is a routine operation for retrieving package metadata from the official NPM registry, a well-known service.
  • [INDIRECT_PROMPT_INJECTION]: The version resolution logic described in references/angular-version.md involves reading repository files like package.json and lockfiles. While these are external ingestion points for data, the skill's logic is restricted to extracting version strings and does not provide a path for instruction execution from these sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 29, 2026, 02:24 PM