plugin-heavy-dep
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides defensive coding practices for path containment. It correctly identifies risks associated with directory traversal, especially on Windows systems with drive-letter case sensitivity, and recommends using path.relative for validation.
- [SAFE]: The skill includes explicit instructions for sanitizing untrusted markup produced by external renderers. It advocates for strict mode, SVG whitelist sanitization, and the removal of dangerous attributes like script and event handlers to prevent XSS.
- [SAFE]: The guidance on lazy loading and host-scoped routing promotes secure architecture by restricting file serving to a specific library directory and a whitelist of extensions.
Audit Metadata