sveltekit
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or security risks detected. The skill provides standard SvelteKit best practices and references official, well-known framework repositories for Svelte and SvelteKit.
- [INDIRECT_PROMPT_INJECTION]: The skill involves processing code and external information, representing a standard attack surface for indirect prompt injection.
- Ingestion points: The instructions guide the agent to read route-specific files (e.g.,
+page.server.ts,hooks.server.ts) and query external grounding via DeepWiki. - Boundary markers: None defined within the skill text.
- Capability inventory: Limited to reading local code files and retrieving documentation; no file-write or subprocess capabilities are utilized by the skill instructions.
- Sanitization: No explicit sanitization or delimiting instructions are provided for processed code.
Audit Metadata