svelte-awesome
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides structured documentation, best practices, and learning paths for the Svelte 5 framework. The content is educational and aligns with official Svelte documentation.
- [EXTERNAL_DOWNLOADS]: The skill references standard development tools including npx sv and npm, which are official utilities for the Svelte ecosystem and are used for project initialization and dependency management.
- [INDIRECT_PROMPT_INJECTION]: Documentation examples illustrate patterns for ingesting external data via the fetch API and component props. While this introduces a theoretical injection surface in applications built using these patterns, the skill explicitly notes security considerations such as XSS risks when using raw HTML rendering (@html). Mandatory evidence chain: Ingestion points: examples/getting-started.md (fetch API) and examples/component-patterns.md (props); Boundary markers: Absent; Capabilities: Project scaffolding via npx sv and dependency management via npm; Sanitization: Svelte 5 default template escaping and explicit documentation of XSS risks.
Audit Metadata