date-fns
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a documentation reference for the date-fns library. All instructions follow library best practices, such as validating dates before formatting and using correct Unicode tokens.
- [EXTERNAL_DOWNLOADS]: The skill references the installation of standard, well-known Node.js packages including date-fns, @date-fns/tz, and @date-fns/utc. All external links point to official project websites or reputable source code repositories on GitHub.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a data ingestion surface where user-provided strings are parsed into date objects.
- Ingestion points: The
parseISO(userInput)example inreferences/setup-core.mddemonstrates handling external data. - Boundary markers: The skill encourages the use of logical checks like
isValid()to verify parsed data. - Capability inventory: There are no scripts or tools within the skill that perform dangerous operations (such as command execution or network requests) using this parsed data.
- Sanitization: Documentation explicitly instructs developers to validate inputs using
isValid()before using the data in formatting or database operations.
Audit Metadata