xss-prevention
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill functions as a security educational resource, offering implementation patterns for defensive coding and user input sanitization.\n- [SAFE]: All code examples and recommended dependencies involve well-known and trusted security libraries, including DOMPurify for HTML sanitization, bleach for Python-based cleaning, and Helmet for Content Security Policy (CSP) management.\n- [SAFE]: The documentation correctly identifies and warns against the use of high-risk APIs such as
innerHTMLandevalwith user-controlled data.\n- [SAFE]: Implementation examples for Content Security Policy (CSP) headers follow best practices by incorporating dynamic nonces and strict resource policies.\n- [NO_CODE]: The skill consists entirely of documentation and code examples within markdown files; it does not include executable scripts, package manifest files, or automated tool configurations.
Audit Metadata