resonate-lovable-usage-prompt-typescript
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to download and use official NPM packages (@resonatehq/sdk, @resonatehq/supabase) and Docker images (resonatehq/resonate). These resources are provided by the author of the skill and are necessary for the described functionality.\n- [COMMAND_EXECUTION]: The skill provides standard infrastructure deployment and management commands (gcloud run deploy, docker pull) which are expected for configuring the backend services described.\n- [DATA_EXFILTRATION]: The code snippets facilitate data transfer between the Lovable backend and an external Resonate server. This is a primary feature of the integration and uses user-configured endpoints.\n- [CREDENTIALS_UNSAFE]: The skill demonstrates safe practices by recommending the use of environment variables for sensitive configuration such as authentication tokens and API URLs.
Audit Metadata