pinia-colada
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive documentation for Pinia Colada. No malicious patterns such as prompt injection, obfuscation, or unauthorized data access were detected.
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install official packages including
@pinia/colada,pinia, and@pinia/colada-nuxt. These are well-known, legitimate libraries within the Vue.js ecosystem and originate from trusted sources. - [CREDENTIALS_UNSAFE]: The skill correctly advises users to use environment variables (
import.meta.env) for API base URLs and sensitive configuration rather than hardcoding them, which is a standard security best practice. - [DATA_EXFILTRATION]: Network operations are limited to standard API fetching patterns using relative paths or user-defined base URLs for the purpose of the library's primary function (data fetching). No suspicious external exfiltration was found.
- [COMMAND_EXECUTION]: Shell commands are restricted to package installation (
bun add) of legitimate dependencies and do not involve arbitrary code execution or privilege escalation.
Audit Metadata