vue
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external developer-controlled files, creating a surface where malicious instructions in those files could influence agent behavior.
- Ingestion points: Processes project source files (
.vue), package configuration (package.json), and directory structures. - Boundary markers: The skill lacks explicit instructions to ignore or isolate Natural Language instructions found within source code comments or strings.
- Capability inventory: The agent using this skill is empowered to implement, review, and verify code, which includes writing to the local file system.
- Sanitization: No specific sanitization or filtering logic is defined for the input data.
Audit Metadata