arch-webext-vue
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation references and utilizes a starter template and utility scripts from GitHub repositories (antfu-collective/vitesse-webext and antfu/skills). These are standard, well-recognized resources in the Vue and Vite developer ecosystems.
- [COMMAND_EXECUTION]: The development and CI workflows involve standard package management and build commands, including pnpm install, pnpm run build, and pnpm run test. These are executed within the context of a standard JavaScript development environment.
- [INDIRECT_PROMPT_INJECTION]: The instructions describe the implementation of content scripts that interact with external web content. To mitigate risks associated with untrusted host pages, the skill recommends mounting the extension's UI within a Shadow DOM to provide CSS and DOM isolation, which is a recommended security pattern for browser extensions.
Audit Metadata