dom-clobbering-anti-pattern
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill serves as an educational document describing the DOM Clobbering vulnerability (CWE-79 variant). It contains no executable logic.
- [SAFE]: Code snippets provided (JavaScript, React, TypeScript) are illustrative examples intended to help developers identify, test, and fix vulnerabilities in their own applications. They are not executed by the skill.
- [SAFE]: The skill does not contain any remote dependencies, package installations, or instructions that could lead to prompt injection, privilege escalation, or data exfiltration.
- [SAFE]: External links provided are directed towards established security industry resources (OWASP, PortSwigger, CWE) and a public GitHub repository for security context documentation.
Audit Metadata