sveltekit-data-flow
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of technical documentation and code snippets for SvelteKit development. The provided patterns for handling data, environment variables, and authentication follow established security best practices, such as server-side validation and the separation of private and public credentials.\n- [INDIRECT_PROMPT_INJECTION]: The skill documents how to ingest untrusted data through SvelteKit form actions. This inherent attack surface is addressed by documenting the use of validation libraries like Zod and Valibot to sanitize inputs before processing, which aligns with secure development standards.
Audit Metadata