velt-suggestions-best-practices
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of documentation and code snippets providing implementation rules for Velt Suggestions in React and Next.js environments. No executable malicious code was found.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials or secrets were detected. The authentication examples correctly use the
authProviderpattern with placeholders for API keys. - [EXTERNAL_DOWNLOADS]: The skill references the
@veltdev/reactpackage and official Velt documentation. These resources are standard vendor-provided components for the stated functionality. - [INDIRECT_PROMPT_INJECTION]: The skill documentation addresses workflows where AI agents can propose suggestions. It correctly identifies the attack surface of untrusted data by implementing a 'propose-then-review' lifecycle, ensuring that human reviewers must explicitly accept proposed changes before they are applied to the application state.
Audit Metadata