markstream-vue2
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
markstream-vue2and@vue/composition-apipackages using standard Node.js package managers. - [INDIRECT_PROMPT_INJECTION]: The skill provides guidelines for rendering untrusted markdown content via the
MarkdownRendercomponent. - Ingestion points: The component accepts arbitrary content via the
:contentprop (defined in SKILL.md). - Boundary markers: The instructions do not specify explicit boundary markers for the rendered content.
- Capability inventory: The skill is limited to UI rendering and does not utilize shell execution, file system modifications, or network request capabilities.
- Sanitization: The instructions highlight that the component defaults to
html-policy="safe"and enables Mermaid strict mode by default to prevent malicious payloads in markdown from affecting the host application (SKILL.md).
Audit Metadata