ng-data-access
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard architectural guidance for building Angular applications using modern Signals-based primitives (resource, httpResource, rxResource).
- [DATA_EXPOSURE]: The skill demonstrates safe handling of authentication tokens using
HttpInterceptorFnand recommends best practices for SSR transfer caching, such as excluding requests with authorization headers to prevent cross-user data leakage. - [INDIRECT_PROMPT_INJECTION]: To mitigate risks from untrusted API data, the skill specifically recommends using the
parseoption inhttpResourceto perform runtime validation (e.g., using Zod schemas) at the network boundary. - [COMMAND_EXECUTION]: The provided verification steps use standard development tools (
pnpm,tsc,vitest) for type-checking, linting, and testing, following common industry practices.
Audit Metadata