vue-expert-js
Fail
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSMETADATA_POISONINGINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation URL linked in the skill (https://jeffallan.github.io/claude-skills/skills/frontend/vue-expert-js/) has been flagged as malicious by automated security scanners.\n- [METADATA_POISONING]: The skill definition file SKILL.md has been flagged by file reputation scanners as FileRepMalware, indicating a high probability of malicious content.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes complex Vue component logic and state management patterns, creating an attack surface for indirect prompt injection.\n
- Ingestion points: Vue component logic and state management definitions provided in the skill instructions and references.\n
- Boundary markers: No delimiters or warnings are present to isolate or ignore instructions that might be embedded in the code snippets or JSDoc comments being analyzed.\n
- Capability inventory: The skill creates code that uses fetch for network operations and localStorage for state persistence, providing potential exfiltration paths.\n
- Sanitization: No sanitization or validation logic is specified for the code or documentation being processed.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- AI detected serious security threats
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata