vuex-vue2

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the Vuex library via unpkg.com, which is a well-known and established CDN for hosting NPM packages.
  • [COMMAND_EXECUTION]: Provides standard command-line instructions for installing the vuex package using common managers like npm, yarn, and pnpm.
  • [DATA_EXFILTRATION]: Examples in actions.md demonstrate the use of fetch to retrieve data from relative local API endpoints (e.g., /api/users/), which is a standard pattern for web applications.
  • [PERSISTENCE]: The plugins.md file includes a code example for persisting application state to localStorage. This is a routine frontend development practice and does not affect the host system's shell or persistence mechanisms.
  • [INDIRECT_PROMPT_INJECTION]: The skill documents data ingestion points via API fetching, but does not provide capabilities for executing arbitrary commands or network exfiltration based on that data. It serves as an instructional resource without an exploitable attack surface.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 10:19 AM