taruvi-refine-providers
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill assists in developing applications that ingest and process data from external sources, including Taruvi datatables, storage metadata, and user records.\n
- Ingestion points: Data retrieved via
dataProvider,storageDataProvider,userDataProvider, andappDataProvider(specifically for function and analytics results).\n - Boundary markers: The instructions do not define delimiters or specific warnings for the agent when handling or displaying data retrieved from these external sources.\n
- Capability inventory: The skill facilitates the creation of React components and the execution of serverless functions via the
useCustomhook within theappdata provider.\n - Sanitization: No specific guidance is provided for sanitizing or validating external data before it is interpolated into UI components or used as parameters for further function calls.\n- [EXTERNAL_DOWNLOADS]: The documentation references the installation of required integration packages from public registries.\n
- Evidence: The installation of
@taruvi/refine-providers,@taruvi/sdk, and@refinedev/coreis documented inreferences/overview.mdusing standardnpm installcommands.
Audit Metadata