date-fns

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill acts as a documentation reference for the date-fns library. All instructions follow library best practices, such as validating dates before formatting and using correct Unicode tokens.
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of standard, well-known Node.js packages including date-fns, @date-fns/tz, and @date-fns/utc. All external links point to official project websites or reputable source code repositories on GitHub.
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies a data ingestion surface where user-provided strings are parsed into date objects.
  • Ingestion points: The parseISO(userInput) example in references/setup-core.md demonstrates handling external data.
  • Boundary markers: The skill encourages the use of logical checks like isValid() to verify parsed data.
  • Capability inventory: There are no scripts or tools within the skill that perform dangerous operations (such as command execution or network requests) using this parsed data.
  • Sanitization: Documentation explicitly instructs developers to validate inputs using isValid() before using the data in formatting or database operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 11:13 AM