svelte-5
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for Svelte 5 development, providing guidance on reactive runes ($state, $derived, $effect) and SvelteKit server patterns.
- [EXTERNAL_DOWNLOADS]: Recommends standard development and testing tools from public registries, such as vitest-browser-svelte, playwright, and axe-core. These are well-known resources within the web development ecosystem.
- [COMMAND_EXECUTION]: Instructs the user on standard development workflows, including package installation with pnpm and build analysis with Vite and Lighthouse. These commands are typical for the described use case.
- [SAFE]: Explicitly encourages security best practices, such as server-side input validation using Zod or Valibot, preventing data leaks by using context instead of module-level state, and implementing secure session cookie configurations (httpOnly, secure, sameSite).
Audit Metadata