inertia-react-development

Pass

Audited by Gen Agent Trust Hub on Jul 29, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PROMPT_INJECTION]: The skill metadata identifies the author as 'laravel', which is inconsistent with the actual provider 'promovaweb', representing a deceptive metadata pattern.
  • [PROMPT_INJECTION]: The skill facilitates an indirect prompt injection surface by instructing the agent to build components that render untrusted data without recommending boundary markers or specific sanitization.
  • Ingestion points: Data props in components like UsersIndex and Dashboard, and JSON responses from useHttp.
  • Boundary markers: No delimiters or safety instructions are suggested for interpolated data within the templates.
  • Capability inventory: The skill uses router.visit, useHttp, and <Form> which allow for navigation and network interactions based on processed states.
  • Sanitization: No explicit sanitization or validation of data content is provided beyond default React rendering.
  • [EXTERNAL_DOWNLOADS]: The skill references the well-known @inertiajs/react package for standard Inertia.js functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 29, 2026, 11:15 PM
Security Audit — agent-trust-hub — inertia-react-development