eleventy-nunjucks
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides extensive security guidance, including a dedicated 'Audit kit' (security-checklist.md) for XSS, CSP, and secret detection.
- [SAFE]: Implements a robust 'jsonScript' filter in 'references/filters.md' to prevent XSS vulnerabilities when injecting data into client-side script tags.
- [SAFE]: Addresses indirect prompt injection risks by providing explicit instructions for sandboxing untrusted Markdown and preventing its use as template source code.
- [SAFE]: Promotes supply chain hygiene by requiring explicit passthrough mappings for assets and frozen lockfiles in CI/CD pipelines to prevent accidental file exposure or dependency drift.
- [SAFE]: Includes detailed troubleshooting and review checklists that focus on preventing common developer errors such as unclosed tags, context leaks in macros, and insecure output escaping.
Audit Metadata