Skills
Navigate
skills/decocms/blocks/deco-cms-route-config/Gen Agent Trust Hub

deco-cms-route-config

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill configures routes that ingest and render content directly from a CMS.
  • Ingestion points: The Route.useLoaderData() hook in $.tsx and index.tsx retrieves data via the loadCmsPage function.
  • Boundary markers: The skill does not implement specific delimiters or 'ignore' instructions for the data fetched from the CMS.
  • Capability inventory: The skill uses the ingested data to drive UI rendering but does not expose OS-level shell capabilities.
  • Sanitization: Standard JSON.stringify is applied to JSON-LD objects.
  • [DYNAMIC_EXECUTION]: The skill includes patterns for dynamic loading and injection.
  • Evidence: The Seo.tsx component snippet uses dangerouslySetInnerHTML to insert JSON-LD scripts: dangerouslySetInnerHTML={{ __html: JSON.stringify(jsonLD) }}.
  • Evidence: The decoInvokeRouteConfig and decoRenderRouteConfig factories define endpoints for remote action execution and section rendering within the framework.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 06:53 AM
Security Audit — agent-trust-hub — deco-cms-route-config