pwa-development
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: The skill's functionality is restricted to assisting with web development tasks. All provided scripts use the Deno runtime with specific, restricted permissions (--allow-read, --allow-write), ensuring no unauthorized network access or privilege escalation occurs.- [INDIRECT_PROMPT_INJECTION]: The skill provides tools that ingest user-defined configuration files (e.g., manifest.json and resource inventory files) and interactive input to generate or audit PWA settings.
- Ingestion points: Files read by scripts/pwa-audit.ts and scripts/cache-strategy-advisor.ts; interactive input in scripts/manifest-generator.ts.
- Boundary markers: Absent in template generation.
- Capability inventory: Filesystem read and write access via Deno scripts.
- Sanitization: Relies on structured JSON parsing and basic field validation.- [DYNAMIC_EXECUTION]: scripts/sw-scaffolder.ts generates JavaScript code based on static templates and configuration inputs. This is the intended behavior for a scaffolding tool and does not involve runtime execution of untrusted input strings.
Audit Metadata