rich-text-editor
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
- [SAFE]: The skill is strictly documentation-based, providing architectural patterns and implementation workflows for UI components. No executable scripts, shell commands, or automated installers are included.
- [EXTERNAL_DOWNLOADS]: The documentation contains links to well-known and reputable technical resources, including the W3C (w3.org), MDN Web Docs (developer.mozilla.org), and official NPM package pages for established libraries (@tiptap/react, slate, and lexical). These references are used for developer education and do not trigger automated code downloads.
- [INDIRECT_PROMPT_INJECTION]: The skill describes the implementation of a user input surface (Rich Text Editor). The guidelines explicitly include security best practices, such as the requirement for server-side validation and content sanitization rules to safely handle untrusted input.
Audit Metadata