angular-with-rails
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides secure best practices for authentication, specifically advising against storing JWTs in
localStorageto mitigate XSS risks and recommendinghttpOnlycookies as a safer alternative. - [SAFE]: CORS configuration patterns follow the principle of least privilege by using environment variables for origin validation and specifying allowed methods and headers.
- [EXTERNAL_DOWNLOADS]: The skill references official documentation and repositories from trusted organizations including the Angular team (Google), Ruby on Rails, and NgRx. These references are documented neutrally and point to well-known, authoritative sources.
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates data ingestion from an API. It uses Angular's standard template interpolation (
{{ }}), which provides built-in sanitization against cross-site scripting (XSS) for data rendered in the UI. - [COMMAND_EXECUTION]: The shell commands provided (e.g.,
ng new) are standard initialization steps for the Angular CLI and do not include any obfuscated or dangerous execution patterns.
Audit Metadata