svelte-awesome

Pass

Audited by Gen Agent Trust Hub on Jul 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a high-quality educational resource for Svelte 5. It contains architecture diagrams, learning paths, and detailed examples for core features like Runes and SvelteKit.\n- [EXTERNAL_DOWNLOADS]: The documentation references official Svelte tools and packages, such as npx sv create and @sveltejs/kit. These are standard, well-known utilities within the Svelte ecosystem and are used as intended for project initialization and development.\n- [INDIRECT_PROMPT_INJECTION]: As a web development framework guide, the skill provides examples for handling user-supplied data (e.g., via bind:value or API routes). The documentation correctly identifies security considerations for these patterns, specifically warning about XSS risks when using the {@html} tag, which is a best practice for developer documentation.\n- [COMMAND_EXECUTION]: The skill mentions command-line tools like sv check and sv migrate. These are legitimate development tools used for linting, type-checking, and automated code migration. No unauthorized or silent command execution patterns were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 13, 2026, 08:24 AM
Security Audit — agent-trust-hub — svelte-awesome