nuxt
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of Markdown-based documentation and architectural guides for Nuxt applications. No executable scripts are distributed with the skill beyond standard code examples.
- [EXTERNAL_DOWNLOADS]: The documentation references official GitHub repositories, package registries (npm, pnpm), and well-known deployment platforms (Vercel, Netlify, Cloudflare). These are standard dependencies within the framework's ecosystem.
- [CREDENTIALS_SAFE]: The skill correctly illustrates best practices for secret management by demonstrating the use of environment variables and
.envfiles for sensitive keys, rather than hardcoding them in the application logic. - [INDIRECT_PROMPT_INJECTION]: As a developer-focused reference tool, this skill provides the agent with context for reading and writing project files. While this represents a standard attack surface for agents interacting with code, the skill itself contains no malicious injection patterns and follows documented framework conventions.
Audit Metadata