tour-guide
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill provides a purely UI-focused React component for creating application tours without external dependencies.
- [COMMAND_EXECUTION]: The component uses
document.querySelectorto locate elements for the spotlight tour based on developer-defined CSS selectors. This is standard behavior for DOM-interacting UI components. - [DATA_EXPOSURE]: No sensitive data access or network exfiltration patterns were found. The component operates entirely within the browser's DOM for layout measurement purposes.
- [OBFUSCATION]: The code is provided in plain text (TSX) with no evidence of encoding or hidden characters.
Audit Metadata