zustand-state-builder
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill generates code templates that ingest data from external sources (e.g.,
fetch('/api/users')). While this creates a standard attack surface for indirect injection if the API response is compromised, the skill provides typical error handling and standard architectural patterns for frontend development. - Ingestion points: API response parsing in
fetchUsers,addUser, andloginactions. - Capability inventory: State updates and local API interaction via
fetch. - Sanitization: Includes basic
try-catchblocks and state-based error reporting. - [COMMAND_EXECUTION]: The documentation includes standard commands for package installation (
npm install zustand immer). These are legitimate development operations for the stated purpose of the skill.
Audit Metadata