add-pdf-viewer

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFE
Full Analysis
  • [Dependency Verification]: The skill performs a check to ensure the @microsoft/power-apps-native-pdf-viewer package is already installed and meets the required version criteria. This prevents unexpected behavior from missing or outdated dependencies and relies on a trusted vendor resource.- [Input Validation]: The generated code for the PDF viewer wrapper includes specific validation to restrict URLs to https:// and file:// protocols. By explicitly rejecting other schemes like http:// or blob:, the skill implements a security-conscious approach to handling external inputs.- [Development Tooling]: The skill utilizes standard command-line tools for environment verification and TypeScript type-checking. These operations are scoped to the project directory and are consistent with standard software development workflows.- [Indirect Prompt Injection Consideration]: The generated wrapper processes URL strings at runtime. While the skill includes protocol validation to mitigate risks, standard best practices for mobile development should be followed to ensure the URLs passed to the component originate from trusted sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 08:01 AM