highlights
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_EXECUTION]: The skill utilizes WebAssembly (Wasm) to perform high-performance syntax highlighting. It provides standardized APIs (init, createHighlighter) for managing Wasm modules, which is an expected architecture for this type of utility and does not constitute a security threat in this context.
- [EXTERNAL_DOWNLOADS]: The documentation instructs the user to install the @pierre/highlights package via standard package managers. This is a legitimate resource owned by the vendor (pierrecomputer) as identified in the author context.
- [INDIRECT_PROMPT_INJECTION]: The library processes external code input for highlighting. The documentation explicitly provides and encourages the use of a validation utility (isSupportedLanguage) to sanitize language labels, mitigating potential injection risks from untrusted metadata.
Audit Metadata