add-flashlist
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@shopify/flash-listpackage, which is an official library provided by a well-known technology organization. - [INDIRECT_PROMPT_INJECTION]: The skill triggers based on user-provided keywords such as 'FlashList' or 'long list'. Although this involves processing untrusted user input to select the appropriate response, the skill utilizes static code templates and standard package managers, maintaining a low risk profile.
- [SAFE]: The reference documentation included with the skill provides explicit security guidance, instructing developers to avoid hardcoding secrets, API keys, or environment variables and recommending the use of official secret management paths.
Audit Metadata