stackblitz-rate-limits
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes local project files, lockfiles, and dependency metadata to establish performance budgets, creating a surface for indirect prompt injection if those files contain malicious instructions.
- Ingestion points: Analyzes mounted files, dependency counts, and project lockfiles through
Read,Glob, andGreptools. - Boundary markers: No explicit boundary markers or 'ignore embedded instructions' warnings are defined for the data ingestion process.
- Capability inventory: The skill utilizes
Read,Glob,Grep,WebFetch,Write, andEdittools. - Sanitization: No specific sanitization or validation of the ingested file content is mentioned.
- [EXTERNAL_DOWNLOADS]: The skill fetches and references documentation from official StackBlitz and WebContainers sources.
- References technical guides and API specifications from
webcontainers.ioanddeveloper.stackblitz.comto assist in performance measurement.
Audit Metadata