legend-state
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references documentation, source code, and package metadata from well-known and trusted domains, including legendapp.com, github.com, and npmjs.com.
- [COMMAND_EXECUTION]: Includes informational shell commands like
bun infoto assist users in identifying the installed versions of the@legendapp/statelibrary during development. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes local project artifacts such as lockfiles and TypeScript declarations to provide contextual advice. Ingestion points: Project configuration and source files. Boundary markers: None explicitly defined. Capability inventory: Local file read access and package manager information retrieval. Sanitization: Relies on the agent's core safety guardrails. As this is part of the primary intended function for a development assistant, it is assessed as safe.
Audit Metadata