legend-state

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references documentation, source code, and package metadata from well-known and trusted domains, including legendapp.com, github.com, and npmjs.com.
  • [COMMAND_EXECUTION]: Includes informational shell commands like bun info to assist users in identifying the installed versions of the @legendapp/state library during development.
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes local project artifacts such as lockfiles and TypeScript declarations to provide contextual advice. Ingestion points: Project configuration and source files. Boundary markers: None explicitly defined. Capability inventory: Local file read access and package manager information retrieval. Sanitization: Relies on the agent's core safety guardrails. As this is part of the primary intended function for a development assistant, it is assessed as safe.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 11:13 AM