client-side-views
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a technical guide for Vaadin 25 and Hilla development. It contains no executable code or instructions that could compromise the agent or the user's environment.
- [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety filters, or extract system prompts were detected. The instructions are focused on development patterns.
- [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or credentials are present. The documentation correctly instructs users on how to manage authentication and authorization using framework-standard annotations like @RolesAllowed.
- [DATA_EXFILTRATION]: No unauthorized network operations or access to sensitive local files were found. The network communication described is standard for client-server interaction in the Vaadin/Hilla framework.
- [REMOTE_CODE_EXECUTION]: No patterns for downloading and executing untrusted scripts (e.g., curl|bash) or installing unverified packages were detected.
- [COMMAND_EXECUTION]: No suspicious use of shell commands, privilege escalation (sudo), or persistence mechanisms.
- [INDIRECT_PROMPT_INJECTION]: The skill explicitly teaches security best practices to prevent vulnerabilities, such as using @Valid for server-side validation and coordinating client-side route protection with server-side endpoint enforcement.
Audit Metadata