use-dom
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is an educational resource documenting the standard use of Expo DOM components. No malicious commands, obfuscation, or unauthorized data access patterns were identified.\n- [PROMPT_INJECTION]: The skill describes a pattern for ingesting data (such as code, content, or data props) into an isolated WebView context, which represents an indirect injection surface.\n
- Ingestion points: Props passed to components like WebChart, SyntaxHighlight, and MyComponent in SKILL.md.\n
- Boundary markers: Not included in the educational examples.\n
- Capability inventory: The skill demonstrates exposing native capabilities (e.g., Alert.alert and saveData) to the WebView context via a bridge in SKILL.md.\n
- Sanitization: Input validation and escaping are not shown in the technical snippets.
Audit Metadata