leptos
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official repositories (github.com/leptos-rs) and standard Rust development tools (trunk, cargo-leptos, cargo-generate). These are well-known services within the technology community and represent legitimate developer workflows.
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates how to create web forms that process user input (e.g., adding books to a list). This constitutes a standard web application attack surface.
- Ingestion points: User-provided input fields (title, author) in the BookList component within src/app.rs.
- Boundary markers: None explicitly implemented in the provided UI examples.
- Capability inventory: The skill utilizes cargo and trunk for builds, and sqlx for database interactions.
- Sanitization: Includes basic server-side validation (trimming and checking for empty strings) within server functions.
Audit Metadata