sveltekit
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill serves as a tutorial and reference for SvelteKit, following official framework conventions.
- [COMMAND_EXECUTION]: Includes boilerplate setup commands (
npm create svelte@latest,npm install) which are standard and expected for project scaffolding. - [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for handling external input through form actions and route parameters. 1. Ingestion points:
src/routes/contact/(form data) andsrc/routes/blog/[slug]/(URL parameters). 2. Boundary markers: No explicit prompt boundary markers are defined in the instructional text. 3. Capability inventory: Commands for local project creation and development server execution. 4. Sanitization: The skill explicitly recommends validation and sanitization in the 'Security & Safety Notes' section and mentions built-in CSRF protection. - [DATA_EXPOSURE]: Correctly identifies
+page.server.tsand$lib/server/as safe locations for server-side logic and secrets, preventing accidental exposure to the client.
Audit Metadata