zustand
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill provides documentation and coding patterns for the Zustand state management library. All instructions follow industry standard practices for React development.
- [INDIRECT_PROMPT_INJECTION]: The skill documents patterns for fetching data from external API endpoints, representing a data ingestion surface. 1. Ingestion points:
references/patterns.mdcontains examples of fetching data from network endpoints usingfetch. 2. Boundary markers: Absent in code examples, as is typical for library documentation. 3. Capability inventory: The skill is restricted to read-only file operations (Read,Grep,Glob) and does not perform active network or shell operations itself. 4. Sanitization: Includes basic error handling and type checking within the code patterns. - [COMMAND_EXECUTION]: The documentation suggests the use of standard development scripts for environment maintenance. Evidence: Mentions
pnpm run typecheckandpnpm run testin the validation checklist.
Audit Metadata