solid-react
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a collection of best practices and templates for React development, with no instructions for data exfiltration or malicious behavior.
- [COMMAND_EXECUTION]: Includes a recommendation to use npx jscpd, a standard development tool for code duplication analysis.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to explore and grep the local codebase to follow established patterns, which is a standard functional requirement for coding assistants and does not involve processing untrusted external data in an exploitable way.
Audit Metadata