nav-dekoratoren
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes structured data such as breadcrumb titles and language labels that are interpolated into the application's HTML output. The documentation highlights built-in safety features, such as the default redaction of breadcrumb titles in analytics events to prevent the accidental exposure of sensitive user data.
- [DYNAMIC_EXECUTION]: The integration patterns utilize libraries like
html-react-parserandjsdomto parse and inject HTML fragments fetched from the Nav Dekoratør service. This dynamic behavior is a functional requirement for the skill's primary purpose and targets the author's internal services. - [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the
@navikt/nav-dekoratoren-modulerpackage from the author's official registry on GitHub Packages. This is a standard dependency management practice for tools within the author's ecosystem.
Audit Metadata