enhance-pwa
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard development commands, including
npm installfor PWA plugins andnpx lighthousefor auditing the application's performance and PWA compliance. - [EXTERNAL_DOWNLOADS]: The skill uses
firecrawl:firecrawl_searchto fetch updated framework-specific PWA documentation andcontext7:resolve-library-idto retrieve library information, which are standard operations for retrieving technical guidance. - [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it audits local project files (e.g.,
package.json, configuration files) and fetches external documentation to influence the generation of manifest and service worker files. - Ingestion points: Reads local configuration files (
vite.config.*,next.config.*,package.json) and external search results from Firecrawl. - Boundary markers: Not explicitly defined in the provided snippets, but instructions follow a strictly structured "Audit-Choose-Ship" workflow.
- Capability inventory: File system read/write, shell command execution, and network search tools.
- Sanitization: Not explicitly mentioned; however, the skill focuses on generating standard JSON manifests and boilerplate service worker code.
Audit Metadata