best-practices

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a high-quality educational resource for modern web standards. It includes specific, actionable advice on preventing XSS via Trusted Types and DOMPurify, implementing secure CSP headers, and managing subresource integrity (SRI). It correctly warns against the mid-2024 polyfill.io supply-chain attack and provides secure alternatives. All external references are to trusted documentation sources like MDN and OWASP. No automated execution or risky dependencies are involved.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 11:33 AM