markstream-vue2
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill describes legitimate integration steps for a frontend library. No malicious command execution, data exfiltration, or obfuscation was found.\n- [INDIRECT_PROMPT_INJECTION]: The skill involves rendering external markdown content, which creates a potential surface for indirect prompt injection if the content is untrusted.\n
- Ingestion points: The
MarkdownRendercomponent accepts acontentprop as shown in the example inSKILL.md.\n - Boundary markers: The workflow instructs the agent to obtain explicit user approval before making changes.\n
- Capability inventory: The skill is limited to frontend UI rendering within a Vue.js application environment.\n
- Sanitization: The instructions explicitly mention keeping HTML safe, using strict Mermaid settings, and not relaxing rendering safety for untrusted content.
Audit Metadata