observable-framework-imports
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEMETADATA_POISONINGEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [METADATA_POISONING]: The metadata identifies the author as "observablehq", which contradicts the provided author context of "spqw". However, the content accurately reflects the documentation for the Observable Framework.
- [EXTERNAL_DOWNLOADS]: The documentation provides instructions for importing third-party packages from the npm and JSR registries. It highlights the framework's behavior of self-hosting these dependencies to ensure performance and security.
- [DYNAMIC_EXECUTION]: The skill describes the use of dynamic
import()expressions and the legacyrequire()function for loading external libraries at runtime within the framework's environment. - [REMOTE_CODE_EXECUTION]: The guide mentions the ability to import modules from arbitrary remote URLs via HTTPS, explicitly cautioning the user about the security and performance implications of this method.
Audit Metadata