javascript-development
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focuses on legitimate JavaScript and TypeScript development practices. All code examples and instructions are consistent with its stated purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for fetching data from external APIs and reading from local storage. While this presents a potential attack surface for indirect prompt injection if the ingested data contains malicious instructions, the skill also includes specific best practices for input sanitization and data validation to mitigate these risks.
- Ingestion points: API responses via
fetchandaxios(found inSKILL.md,examples/api-integration-patterns.md), andlocalStorage.getItem(found inSKILL.md,references/modern-javascript-2026.md). - Boundary markers: Not explicitly defined in the provided instruction text for the AI agent to ignore data content.
- Capability inventory: Network operations via
fetch/axiosand local storage access across multiple scripts. - Sanitization: Includes a
sanitizeHtmlutility and validation logic inreferences/modern-javascript-2026.md. - [EXTERNAL_DOWNLOADS]: The skill references several well-known and trusted documentation sources and libraries including MDN, Axios, Vite, ESLint, and Prettier. These are standard industry resources and do not represent a security risk.
Audit Metadata