vue
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes read-only shell commands such as
cat package.jsonandlsto identify the project stack (Vue, Nuxt, and Pinia versions). These operations are restricted to standard workspace discovery and do not involve unsafe execution of untrusted input. - [EXTERNAL_DOWNLOADS]: The skill references documentation and configuration patterns from official, well-known services and organizations, including Vue.js, Nuxt, and Vercel. These downloads are documented neutrally as they originate from trusted industry sources.
- [INDIRECT_PROMPT_INJECTION]: The skill provides logic to analyze project files (source code and package manifests). While this creates a processing surface for external data, the skill includes specific security rules to identify and fix issues like leaked credentials or improper data handling, mitigating the risk of following malicious embedded instructions.
- [SAFE]: The skill does not contain any detected malicious patterns, obfuscation, or unauthorized network operations. Its behavior aligns perfectly with its stated purpose as a development assistant.
Audit Metadata