launchpad-webembed
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides integration examples that dynamically load a JavaScript library from https://lp.constellation.pega.com/integrated/react/prod/pega-embed.js. This resource is hosted on the official domain of the skill's author, Pegasystems.
- [CREDENTIALS_UNSAFE]: The documentation covers the management of OAuth credentials. It correctly instructs developers to store sensitive keys in environment variables (.env.local) and explicitly recommends the more secure PKCE flow for public-facing applications where client secrets should not be exposed.
- [DYNAMIC_EXECUTION]: The React code examples utilize dynamic script creation and innerHTML to initialize the pega-embed component. These implementation patterns are standard for this web component and rely on parameters sourced from environment configuration rather than untrusted user input.
Audit Metadata