vue-expert
Fail
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill contains references to documentation and resources hosted at
https://jeffallan.github.io/claude-skills/skills/frontend/vue-expert/. These are external links to the author's documentation repository on GitHub Pages. - [COMMAND_EXECUTION]: The instructions guide the agent to execute standard frontend development commands for project validation and maintenance. This includes running
vue-tsc --noEmitfor TypeScript validation,vitestfor unit testing, and variousnpmcommands for project builds. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user requirements and existing codebase structures to generate Vue components. This creates a surface area for indirect prompt injection via untrusted project data.
- Ingestion points: Component hierarchy analysis and requirements gathering in
SKILL.md. - Boundary markers: Not explicitly defined.
- Capability inventory: Execution of subprocesses for build and test tools (
npm,vue-tsc,vitest) as described inSKILL.md. - Sanitization: No specific input sanitization or output escaping for generated code is implemented.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata