solid-js-1x-best-practices-and-api
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is documentation-based, providing patterns for SolidJS development without associated scripts or executable code.
- [SAFE]: Proactive security advice is included, such as Rule 5-5 which mandates sanitizing content before using dangerous DOM APIs like innerHTML.
- [SAFE]: External URLs point to official documentation or established resources with no evidence of typosquatting.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface where user-provided code is processed (Ingestion points: User queries and eval prompts). It maintains structure via JSX and reactive scope definitions (Boundary markers). Its functionality is restricted to generating text-based code suggestions without autonomous file or network access (Capability inventory). The skill specifically instructs the agent to recommend sanitization libraries like DOMPurify when dealing with raw HTML (Sanitization).
Audit Metadata