markstream-vue2-vite

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the markstream-vue2 library and its peer dependencies using standard Node.js package managers to provide the necessary UI components for integration.
  • [INDIRECT_PROMPT_INJECTION]: The skill addresses the ingestion of untrusted data through the MarkdownRender component in streaming chat UIs. It mitigates this risk by enforcing security boundaries such as html-policy="safe" and Mermaid strict mode by default. Capabilities include generating UI code that processes external data streams, with sanitization handled via the library's built-in safe configuration settings. Any reduction in security (e.g., using trusted mode) is advised only for specific surfaces with clear justification.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 08:00 AM