fp-ts-react
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily instructional content providing boilerplate code and best practices for React development. All evaluated code snippets follow standard functional programming patterns.
- [COMMAND_EXECUTION]: No shell commands, subprocess invocations, or autonomous execution patterns were found in the skill body or metadata.
- [EXTERNAL_DOWNLOADS]: The skill references standard, well-known Node.js libraries for user-initiated installation (e.g.,
fp-ts,zod,io-ts). These are community-vetted packages and do not represent a security risk in this context. - [DATA_EXFILTRATION]: Networking code in the snippets uses typical React patterns for fetching internal API data (e.g.,
/api/users). There are no patterns suggesting exfiltration of sensitive files or environment variables to external domains. - [OBFUSCATION]: No hidden content, encoded strings, homoglyph attacks, or zero-width characters were detected in the instructions or code examples.
- [INDIRECT_PROMPT_INJECTION]: While the code snippets interact with API data, the skill itself does not provide an automated execution environment that would be vulnerable to runtime data-driven attacks. It defines standard boundaries and state-machine patterns (RemoteData) which promote safe data handling.
Audit Metadata