fuzzy-ranking
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents the use of the
@tanstack/match-sorter-utilslibrary, which is a well-known utility for fuzzy matching and sorting. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input through fuzzy matching functions (
rankItem). However, the implementation consists of string comparison logic and relevance calculation without any executable capabilities, network operations, or file system access, presenting no significant attack surface. - [EXTERNAL_DOWNLOADS]: The skill references the
@tanstack/match-sorter-utilspackage. This dependency is from a well-known service and organization, and the usage patterns provided are consistent with standard library documentation.
Audit Metadata