markstream-react
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a documentation guide for the markstream-react library. It does not contain any executable malicious scripts, commands, or attempts to access sensitive local data.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies that markdown renderers are a potential attack surface for indirect prompt injection via untrusted model output. It proactively mitigates this risk by instructing users to keep the
htmlPolicyset tosafeand Mermaid rendering strict, which are standard security controls for this type of component. - [EXTERNAL_DOWNLOADS]: The skill describes the installation of the markstream-react package and its peers. These are standard dependency management instructions for a React/Next.js environment and do not involve unauthorized or suspicious remote code execution.
Audit Metadata