app-hotkeys
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security vulnerabilities or malicious patterns were detected in the skill instructions or referenced documentation.
- [EXTERNAL_DOWNLOADS]: The skill references source code and guides from the official TanStack Hotkeys GitHub repository. These references are provided for development context and do not include instructions for executing untrusted remote scripts.
- [INDIRECT_PROMPT_INJECTION]: The skill describes a mechanism for recording user keyboard input to customize application shortcuts. This input surface is constrained to specific keyboard sequences and is managed through library-provided sanitization (e.g., key position recording), ensuring it cannot be used to execute arbitrary commands or exfiltrate sensitive data.
Audit Metadata