angular-tooling

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill documentation provides standard usage patterns for the Angular CLI (ng commands) and related official tools. All commands, such as building, serving, and testing, follow expected platform behavior.
  • [SAFE]: External dependencies and tools mentioned, including @angular/, @ngrx/, and esbuild-visualizer, are well-known and reputable packages within the JavaScript ecosystem.
  • [SAFE]: Configuration examples for development proxies, environment variables, and local SSL servers follow established development practices and do not involve credential exposure or exfiltration.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses an inherent attack surface as it is designed to interact with and process local project files (e.g., angular.json, package.json). However, this behavior is central to its purpose as a tooling guide and does not incorporate unsafe data handling patterns. 1. Ingestion points: Project configuration files (angular.json, package.json) and source files processed during generation or build steps. 2. Boundary markers: None explicitly defined; rely on standard CLI command boundaries. 3. Capability inventory: Shell command execution via the Angular CLI (ng), package management (npm), and build tools. 4. Sanitization: Not applicable for a CLI-based documentation skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 12:14 PM