make-app-sort
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the Node.js package
@qfei-design/make-app-sort@^0.1.0. This is a vendor-specific package provided by the author to support the skill's sorting capabilities. - [DATA_EXFILTRATION]: The instructions include mandatory security requirements to redact sensitive credentials, tokens, and authorization headers from all boundary logs, preventing accidental data exposure.
- [INDIRECT_PROMPT_INJECTION]: The skill handles potentially untrusted data from Entity Presets and UI inputs. It mitigates this risk through a comprehensive validation chain: 1. Ingestion points: Data enters through the RecordSortPanel and the /api/entities/:entityKey/preset endpoint. 2. Boundary markers: The skill mandates the use of strict transport parsers that reject unknown properties before processing. 3. Capability inventory: The skill manages data persistence (PATCH requests) and UI state updates based on the processed sort configurations. 4. Sanitization: Implements both tolerant sanitization for legacy data reads and strict validation for new writes against the runtime schema by checking sortable capabilities.
Audit Metadata