skills/janpereira-dev/ngautopilot/Angular v22 Iframe Credentialless Security Gate/Gen Agent Trust Hub
Angular v22 Iframe Credentialless Security Gate
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official documentation and repositories from trusted sources including Angular's official blog (blog.angular.dev) and GitHub repository (github.com/angular). These references are used for validation and do not involve untrusted remote code execution.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process project configuration files such as
package.json,angular.json, andtsconfig.jsonto perform audits and code changes. - Ingestion points: Project files including
package.json,lockfile, andangular.json(defined in 'Inputs Expected'). - Boundary markers: None explicitly defined in the prompt instructions to separate file content from agent instructions.
- Capability inventory: The skill allows for writing file changes and executing local build, test, and lint scripts (defined in 'Validation Checklist').
- Sanitization: No explicit sanitization or validation of the input file content is described.
- [COMMAND_EXECUTION]: The skill instructs the agent to run existing validation commands, tests, and linting scripts found within the target repository. These are standard development workflows and are restricted to commands already present in the project environment.
Audit Metadata