skills/lynricsy/hyperskills/vue/Gen Agent Trust Hub

vue

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes read-only shell commands such as cat package.json and ls to identify the project stack (Vue, Nuxt, and Pinia versions). These operations are restricted to standard workspace discovery and do not involve unsafe execution of untrusted input.
  • [EXTERNAL_DOWNLOADS]: The skill references documentation and configuration patterns from official, well-known services and organizations, including Vue.js, Nuxt, and Vercel. These downloads are documented neutrally as they originate from trusted industry sources.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides logic to analyze project files (source code and package manifests). While this creates a processing surface for external data, the skill includes specific security rules to identify and fix issues like leaked credentials or improper data handling, mitigating the risk of following malicious embedded instructions.
  • [SAFE]: The skill does not contain any detected malicious patterns, obfuscation, or unauthorized network operations. Its behavior aligns perfectly with its stated purpose as a development assistant.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 03:14 PM
Security Audit — agent-trust-hub — vue