zustand
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is composed of purely instructional Markdown files and TypeScript code snippets. It provides guidance on using the Zustand library and contains no instructions designed to bypass safety filters or override agent behavior.
- [EXTERNAL_DOWNLOADS]: The documentation mentions standard, well-known Node.js packages including
immer,superjson,vitest,jest, andmsw. These are industry-standard dependencies for React development and testing and are used within their intended contexts. - [DATA_EXFILTRATION]: Code examples demonstrate legitimate uses of browser APIs such as
localStorageandsessionStoragefor state persistence. Examples of data fetching use relative paths (e.g.,/api/bears), representing standard internal application communication. - [COMMAND_EXECUTION]: The skill describes standard development workflows, such as running tests and installing packages via NPM. No suspicious shell commands, privilege escalation attempts, or unauthorized persistence mechanisms were found.
- [DYNAMIC_EXECUTION]: Testing patterns include standard mocking techniques for Vitest and Jest. These are limited to development and testing environments and do not involve the execution of untrusted or dynamically generated code strings.
Audit Metadata