ng-signal-store
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install @ngrx/signals and @ngrx/operators using pnpm. These are well-known, widely used packages within the Angular ecosystem for state management.
- [COMMAND_EXECUTION]: Provides instructions to run pnpm exec ng add @ngrx/signals@latest. This is a standard Angular CLI command for adding official libraries and running their associated schematics.
- [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for ingesting external data into the state store via rxMethod.
- Ingestion points: Data returned from injected data-access services (e.g., BooksService.getByQuery) is processed by the store.
- Boundary markers: Not explicitly defined in the store logic, as data sanitization is expected to be handled at the service or template level.
- Capability inventory: The store is limited to state management and does not perform dangerous operations like arbitrary shell command execution or direct file system access.
- Sanitization: Standard Angular security practices (like template escaping) apply to data displayed from the store.
Audit Metadata