pbvex-components
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documentation provides technical guidance for defining and managing PBVex components, emphasizing best practices such as data isolation, schema validation, and proper environment variable handling.
- [COMMAND_EXECUTION]: The skill references the use of
npx pbvexfor development tasks like code generation and type checking. These are standard operations for a framework-specific developer tool and do not involve arbitrary or suspicious command execution. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing component arguments and schemas. It mitigates potential risks by mandating the use of argument validators and authentication checks to ensure that data entering the application context is properly sanitized and authorized.
- [DATA_EXPOSURE]: The instructions include explicit security warnings against committing secrets to source control. It describes a secure pattern for environment variable management where only variable names are stored in artifacts, while actual values are provisioned at the backend level.
Audit Metadata