ub-nuxt
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill and its references promote secure, framework-native development patterns for Nuxt.js. There is no evidence of malicious behavior, data exfiltration, or obfuscation.
- [COMMAND_EXECUTION]: The migration guide suggests running
npx codemod@latest nuxt/4/migration-recipe. This is a standard and safe developer utility for framework upgrades. - [PROMPT_INJECTION]: The skill defines a surface for indirect prompt injection by reading project files like
package.jsonandnuxt.config.ts(SKILL.md, Workflow Step 1). - Ingestion points: Project configuration and source files (package.json, nuxt.config.*).
- Boundary markers: Absent.
- Capability inventory: File modification and command line suggestions.
- Sanitization: Absent.
- This surface is inherent to development-focused agents and is handled here with a low-risk profile.
Audit Metadata