nuxt
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The documentation includes examples for environment variables (such as NUXT_API_SECRET and GIGET_AUTH) and runtime configuration. These are used strictly as placeholders for educational purposes and follow standard secret management practices.\n- [DYNAMIC_EXECUTION]: The skill documents framework features such as virtual files (addTemplate) and Nitro hooks (render:html) that allow for dynamic code generation and script injection. These are standard extensibility points for Nuxt modules and are presented as part of the framework core functionality.\n- [REMOTE_CODE_EXECUTION]: Documentation for the Nuxt CLI (nuxi) and the Layers system (extends from GitHub) describes standard developer workflows for project initialization and code sharing. These features utilize established well-known services and package managers.\n- [INDIRECT_PROMPT_INJECTION]: As a full-stack framework guide the skill describes mechanisms for ingesting and processing external data (e.g., useFetch, API routes). The documentation provides guidance on validation and proper handling of this data within the application context.
Audit Metadata