stimulus
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill serves as a tutorial and workflow guide for Stimulus.js development. No malicious patterns, prompt injections, or obfuscation techniques were detected. The instructions consistently promote secure coding practices, such as warning against XSS risks when building HTML strings and advising against storing secrets in meta tags.\n- [EXTERNAL_DOWNLOADS]: The skill references numerous well-known and trusted packages from the Stimulus.js ecosystem, including
@hotwired/stimulus,stimulus-use, and various@stimulus-componentslibraries. These are standard industry tools and their use does not escalate the security risk.\n- [COMMAND_EXECUTION]: The documentation includes instructions for standard developer operations using trusted package managers (npm,yarn,importmap) and Rails-specific commands (bin/rails stimulus:manifest:update). No arbitrary or dangerous command execution was found.
Audit Metadata