markstream-vue2-vite
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
markstream-vue2library and its peer dependencies using standard Node.js package managers to provide the necessary UI components for integration. - [INDIRECT_PROMPT_INJECTION]: The skill addresses the ingestion of untrusted data through the
MarkdownRendercomponent in streaming chat UIs. It mitigates this risk by enforcing security boundaries such ashtml-policy="safe"and Mermaid strict mode by default. Capabilities include generating UI code that processes external data streams, with sanitization handled via the library's built-in safe configuration settings. Any reduction in security (e.g., usingtrustedmode) is advised only for specific surfaces with clear justification.
Audit Metadata