tour-guide
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The component is a standard React implementation for a UI onboarding tour. It uses document.querySelector and getBoundingClientRect to locate and measure elements for highlighting.
- [SAFE]: No external network operations (exfiltration) or remote code downloads were detected. The skill specifically claims zero dependencies outside of React, which is consistent with the provided code.
- [SAFE]: Text rendering for tooltips is handled via standard JSX, which provides automatic escaping and protection against Cross-Site Scripting (XSS).
- [SAFE]: System-level interactions are limited to benign browser API calls such as window.scrollTo and body overflow styling to lock the scroll during the tour.
Audit Metadata