javascript-development

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill focuses on legitimate JavaScript and TypeScript development practices. All code examples and instructions are consistent with its stated purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for fetching data from external APIs and reading from local storage. While this presents a potential attack surface for indirect prompt injection if the ingested data contains malicious instructions, the skill also includes specific best practices for input sanitization and data validation to mitigate these risks.
  • Ingestion points: API responses via fetch and axios (found in SKILL.md, examples/api-integration-patterns.md), and localStorage.getItem (found in SKILL.md, references/modern-javascript-2026.md).
  • Boundary markers: Not explicitly defined in the provided instruction text for the AI agent to ignore data content.
  • Capability inventory: Network operations via fetch/axios and local storage access across multiple scripts.
  • Sanitization: Includes a sanitizeHtml utility and validation logic in references/modern-javascript-2026.md.
  • [EXTERNAL_DOWNLOADS]: The skill references several well-known and trusted documentation sources and libraries including MDN, Axios, Vite, ESLint, and Prettier. These are standard industry resources and do not represent a security risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 06:17 AM