nuxt-core
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the analysis and modification of project source code, which serves as a potential ingestion point for indirect prompt injection if malicious instructions are embedded in files processed by the agent.
- Ingestion points: Reads files from the app and server directories, as well as core configuration files like nuxt.config.ts and app.config.ts.
- Boundary markers: The instructions do not define specific delimiters or warnings to disregard instructions found within the project's data.
- Capability inventory: The skill uses Read, Write, Bash, Glob, and Grep tools, which could be misused if the agent were to follow instructions embedded in untrusted code.
- Sanitization: There is no defined logic for sanitizing or validating the content of the project files before they are processed by the agent.
Audit Metadata