nebula-chart-dev
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
@nebula.js/clivianpxto scaffold projects and run development servers. These are standard developer tools for the library. - [EXTERNAL_DOWNLOADS]: The skill references official Qlik developer documentation and examples hosted on
qlik.devand theqlik-ossGitHub organization. It also includes a templatepackage.jsonthat defines standard dependencies for React and nebula.js development. - [DATA_EXFILTRATION]: No evidence of unauthorized data transmission was found. The skill uses standard internal Qlik APIs (
useModel,useLayout) to interact with the connected analytics engine, which is the expected behavior for visualization extensions. - [PROMPT_INJECTION]: The instructions in
SKILL.mdare descriptive and technical, focusing on code implementation and API usage. No patterns attempting to bypass agent safety filters or override system instructions were identified. - [REMOTE_CODE_EXECUTION]: There are no patterns involving the execution of arbitrary remote scripts or untrusted code. The scaffolding logic uses established project templates provided within the skill's own assets folder.
Audit Metadata