docs-vue
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation, API references, and version catalogs from vendor-owned domains. These operations are essential for the skill's primary function as a documentation provider.
- [COMMAND_EXECUTION]: The skill instructions include the use of shell commands such as 'curl' to retrieve remote documentation files. It also references a local Node.js script ('transpile-to-js.mjs') intended to help users convert TypeScript starter kits to JavaScript within their projects.
- [INDIRECT_PROMPT_INJECTION]: The skill processes remote documentation which represents an untrusted data surface. Ingestion points: Documentation URLs and the 'llms-full.txt' file referenced in SKILL.md. Boundary markers: The instructions explicitly direct the agent to 'Answer from the fetched pages only' and to cite the specific page URLs. Capability inventory: The skill possesses capabilities for network access via 'curl' and local file system interactions for configuration checking. Sanitization: No specific sanitization of remote text content is mentioned.
Audit Metadata