vue-expert

Fail

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: CRITICALEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill contains references to documentation hosted on GitHub Pages (jeffallan.github.io). While automated scans flagged these as potentially malicious, manual analysis confirms they are legitimate documentation links related to the skill's purpose. Following the [TRUST-SCOPE-RULE], these references are treated neutrally as they point to the author's public project documentation.
  • [COMMAND_EXECUTION]: The skill instructs the agent to run vue-tsc --noEmit and Vitest commands. These are standard development tools used for type checking and unit testing within a Vue.js environment.
  • [CREDENTIALS_SAFE]: The build-tooling.md file contains examples of .env file configurations. These use placeholders (e.g., https://api.example.com) or standard environment variable patterns (e.g., process.env.SENTRY_AUTH_TOKEN) which is consistent with secure secret management practices.
  • [DATA_EXFILTRATION]: No instances of sensitive file access or unauthorized network transmissions were detected. Network patterns are restricted to standard API fetch examples in documentation.
Recommendations
  • Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Oct 16, 2026, 10:51 PM