taruvi-refine-providers

Pass

Audited by Gen Agent Trust Hub on Nov 5, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill assists in developing applications that ingest and process data from external sources, including Taruvi datatables, storage metadata, and user records.\n
  • Ingestion points: Data retrieved via dataProvider, storageDataProvider, userDataProvider, and appDataProvider (specifically for function and analytics results).\n
  • Boundary markers: The instructions do not define delimiters or specific warnings for the agent when handling or displaying data retrieved from these external sources.\n
  • Capability inventory: The skill facilitates the creation of React components and the execution of serverless functions via the useCustom hook within the app data provider.\n
  • Sanitization: No specific guidance is provided for sanitizing or validating external data before it is interpolated into UI components or used as parameters for further function calls.\n- [EXTERNAL_DOWNLOADS]: The documentation references the installation of required integration packages from public registries.\n
  • Evidence: The installation of @taruvi/refine-providers, @taruvi/sdk, and @refinedev/core is documented in references/overview.md using standard npm install commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 5, 2026, 12:38 PM