basecoat
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference guide for the 'basecoat-css' library. All code snippets provided are standard frontend implementations (HTML, CSS, and Vanilla JS) for common UI patterns such as accordions, dialogs, and forms.
- [EXTERNAL_DOWNLOADS]: The skill references resources from well-known and reputable services, including jsDelivr (CDN), Lucide (icons), and Shadcn (themes). These are standard dependencies for modern web development.
- [COMMAND_EXECUTION]: Provides standard installation instructions for Node.js environments (
npm i basecoat-css) which is expected for a CSS framework guide. - [DATA_EXPOSURE]: No sensitive file paths, hardcoded credentials, or unauthorized data access patterns were identified. The component implementations utilize native browser APIs (e.g.,
<dialog>,popover,CustomEvent) safely. - [INDIRECT_PROMPT_INJECTION]: While the skill defines templates that an agent will populate with user data, the provided JavaScript logic for interactive components (like the custom select or accordion) uses safe DOM manipulation and does not introduce specific vulnerabilities such as unsanitized
innerHTMLrendering.
Audit Metadata