javascript-expert
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and code examples for JavaScript development. All demonstrated tools and packages (e.g., Node.js, npm, Vite, Vitest, Express, Lodash) are industry-standard components of the JavaScript ecosystem.
- [INDIRECT_PROMPT_INJECTION]: As a code generation skill, it processes user tasks (ingestion point) and has capabilities to read, write, and execute code via Node.js tools. The skill addresses this by instructing the agent to follow security best practices, including input validation and output sanitization. This is consistent with the primary purpose of a developer-oriented skill.
Audit Metadata