svelte-meta-tags-setup
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the svelte-meta-tags package from an external registry. This is a vendor-owned resource consistent with the skill's purpose.
- [COMMAND_EXECUTION]: The skill uses package managers (npm, pnpm, yarn, bun) to install software and executes validation scripts (svelte-check).
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes and modifies project files, creating a surface for indirect prompt injection.
- Ingestion points: package.json, src/routes/+layout.ts, src/routes/+page.ts, src/routes/+layout.svelte.
- Boundary markers: Absent.
- Capability inventory: File writing, dependency installation, shell command execution.
- Sanitization: Absent.
Audit Metadata