progressive-web-app
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a developer guide for PWA implementation, providing standard boilerplate for manifest files, HTML shells, and service worker scripts.
- [EXTERNAL_DOWNLOADS]: The skill includes an optional section for Workbox that fetches the library from Google's official content delivery network (
storage.googleapis.com). This is a well-known service and the reference is a legitimate dependency for modern web applications. - [REMOTE_CODE_EXECUTION]: No unauthorized or suspicious remote execution patterns were found. The use of
importScriptswithin the service worker context is the standard method for loading external logic like Workbox. - [DATA_EXFILTRATION]: No patterns of sensitive data access or exfiltration were detected. The network operations described (
fetch) are standard browser behaviors required for PWA functionality and are restricted by the browser's Same-Origin Policy. - [PROMPT_INJECTION]: The instructions are focused on providing code examples and do not contain attempts to override agent behavior or safety filters.
Audit Metadata