vue-standards
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of Markdown documentation outlining project standards and code conventions. It does not contain any executable scripts, binaries, or automated tasks that could pose a security risk to the host environment.
- [EXTERNAL_DOWNLOADS]: The documentation references standard and well-known Node.js libraries, including
axios,pinia,element-plus,colorjs.io, and various Vite plugins. These are established tools in the web development community. It also mentions a vendor-specific package,@haplum/config, which aligns with the skill author's identity. - [COMMAND_EXECUTION]: The skill describes a typical development workflow involving standard tools such as
eslint,oxlint,lint-staged, and therolldown-vitebuilder. These tools are used for code quality and building the application in a standard development context. - [PROMPT_INJECTION]: The content is strictly technical and instructional. No patterns typical of prompt injection, such as attempts to bypass safety filters or override system-level instructions, were found.
- [DATA_EXFILTRATION]: There are no commands or instructions designed to access sensitive local files (e.g., SSH keys, credentials) or transmit them to external servers. The network patterns described are limited to standard API requests within a web application.
- [OBFUSCATION]: All files are written in clear Markdown. No evidence of hidden text, encoded payloads, or character-level obfuscation was detected during the analysis.
Audit Metadata