tw-edu-mini-app
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's HTML templates fetch the React framework and Babel compiler from the official unpkg.com CDN. These references use specific, fixed versions (React 18.3.1 and Babel 7.29.0) which is a standard and safe practice for web application development.
- [COMMAND_EXECUTION]: The skill uses a Python script (
scripts/generate_mini_app.py) to generate application files from templates. It also provides guidance for using standard command-line tools like Vercel CLI and Git for deployment purposes, which aligns with its primary function as a development tool. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest user-provided text to generate educational content. It mitigates potential injection risks by using
json.dumps()in its generation script to safely serialize content into the application's data structures, preventing user input from breaking out of its intended scope during code generation. - [SAFE]: The skill adheres to best practices for frontend development, including the use of LocalStorage for persistent state and explicit design tokens. No evidence of malicious behavior, obfuscation, or credential harvesting was found across the analyzed files.
Audit Metadata