data-fetching-integration
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill serves a legitimate developer productivity purpose, providing a structured workflow for frontend data integration.
- [NO_CODE]: No scripts, binaries, or executable code are distributed with this skill; it contains only markdown instructions for the AI agent.
- [COMMAND_EXECUTION]: The workflow mentions running validation tools such as type-checkers, linters, and test suites. These are standard development tools and do not represent a security risk in this context.
- [PROMPT_INJECTION]: The skill processes project-specific data like 'REPO_PROFILE.json' and API contracts to perform its tasks, which is a standard indirect prompt injection surface for a coding agent.
- Ingestion points: 'REPO_PROFILE.json', endpoint contracts, and UI source code.
- Boundary markers: None.
- Capability inventory: Invocation of standard development tools (typecheck, lint, tests) as specified in the repository profile.
- Sanitization: None.
Audit Metadata