progressive-web-app

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a developer guide for PWA implementation, providing standard boilerplate for manifest files, HTML shells, and service worker scripts.
  • [EXTERNAL_DOWNLOADS]: The skill includes an optional section for Workbox that fetches the library from Google's official content delivery network (storage.googleapis.com). This is a well-known service and the reference is a legitimate dependency for modern web applications.
  • [REMOTE_CODE_EXECUTION]: No unauthorized or suspicious remote execution patterns were found. The use of importScripts within the service worker context is the standard method for loading external logic like Workbox.
  • [DATA_EXFILTRATION]: No patterns of sensitive data access or exfiltration were detected. The network operations described (fetch) are standard browser behaviors required for PWA functionality and are restricted by the browser's Same-Origin Policy.
  • [PROMPT_INJECTION]: The instructions are focused on providing code examples and do not contain attempts to override agent behavior or safety filters.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 09:08 PM
Security Audit — agent-trust-hub — progressive-web-app