arrow-js
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for processing external inputs like URLs through the
routeToPage(url)function, which creates a surface where an agent could be exposed to instructions embedded in the data. - Ingestion points: The routing logic described in
references/examples.mdandreferences/getting-started.mdinvolves processing aurlparameter. - Boundary markers: The provided code snippets do not include delimiters or specific instructions to disregard embedded commands in the processed data.
- Capability inventory: The skill is restricted to documentation and code examples; it does not include any tools or scripts that perform sensitive actions such as file system writing, network requests, or dynamic code execution.
- Sanitization: No sanitization or input validation logic is present in the reference examples.
- [EXTERNAL_DOWNLOADS]: The documentation mentions project initialization using
pnpm create arrow-js@latest, which triggers a standard framework scaffolding process through the package manager.
Audit Metadata