craft-garnish
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides exhaustive documentation on Garnish's class system, drag-and-drop mechanisms, and UI widgets. It focuses on best practices for memory management, accessibility (ARIA), and integration with Craft CMS's asset system.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to assist in the analysis and creation of Craft CMS control panel assets (JavaScript/templates). While this exposes the agent to user-provided source code, the skill itself provides defensive guidelines (e.g., using
Craft.sendActionRequestfor CSRF protection and proper event listener cleanup) rather than introducing vulnerabilities. - [EXTERNAL_DOWNLOADS]: The documentation neutrally references official Craft CMS API documentation at
docs.craftcms.com. This is a well-known service related to the skill's primary purpose and does not constitute a security finding.
Audit Metadata