quasar-app-extension-development

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze external project files, including package.json, repository instructions, and source code (src/index.*, etc.). These files serve as ingestion points for data that could theoretically contain malicious instructions. The skill's capability inventory includes executing Quasar CLI commands (quasar ext add, invoke, remove) and running build/test scripts. While no specific boundary markers or sanitization instructions are provided, this behavior is a standard requirement for the skill's primary purpose of software development.
  • [EXTERNAL_DOWNLOADS]: The instructions refer to official documentation at https://quasar.dev/app-extensions/development-guide/introduction. This is the authoritative source for the Quasar framework and is a trusted domain for this use case.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 02:23 PM
Security Audit — agent-trust-hub — quasar-app-extension-development