vue-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of pedagogical markdown files and code snippets intended for developer education and AI agent guidance.
- The content is instructional and does not contain executable code beyond standard framework usage examples.
- All identified external resources (e.g., Vue.js official docs, MDN, well-known libraries) are trusted or reputable developer resources.
- [INDIRECT_PROMPT_INJECTION]: The skill addresses the surface area for data injection within web templates.
- Ingestion points: Guidelines cover data entering the application through props, user inputs, and API responses (e.g., in
reference/prop-composable-reactivity-loss.md). - Boundary markers: Standard Vue interpolation
{{ }}is used, which automatically escapes HTML content. - Capability inventory: The skill documents state management and DOM manipulation capabilities typical of Vue.js applications.
- Sanitization: The skill provides explicit guidance on avoiding
v-htmlfor untrusted content to prevent XSS attacks, reinforcing secure coding practices. - [SAFE]: The skill author includes critical security advice regarding server-side rendering (SSR), specifically warning against singleton stores to prevent cross-request user data leakage (in
reference/state-ssr-cross-request-pollution.md).
Audit Metadata