ng-zorro-developer
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes local project files such as
package.jsonandsrc/styles.lessto determine the library version and styling configuration. This constitutes an ingestion surface for untrusted data. - Ingestion points:
package.json(for version checking),src/styles.less(for theming detection), and project source code (for import style detection). - Boundary markers: None explicitly defined in the instructions.
- Capability inventory: The skill instructs the agent to generate Angular code and suggests running development commands like
ng buildandng add. - Sanitization: Not applicable as the skill primarily generates code based on detected patterns.
Audit Metadata