nuxt
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- External Package Dependencies: The skill references and requires the installation of several packages from the @emulators scope, including @emulators/adapter-nuxt, @emulators/github, and @emulators/google. These packages provide the core emulation functionality for the Nuxt adapter.
- Data Ingestion and Response Rewriting: The skill sets up server routes to handle incoming requests and dynamically rewrites response content, such as HTML attributes and CSS URLs. This behavior represents a surface for indirect prompt injection, where untrusted external data could be processed by the agent. 1. Ingestion points: Catch-all server routes (server/routes/emulate/[...path].ts) that accept external requests. 2. Boundary markers: Absent for the processed request data. 3. Capability inventory: Server-side request parsing, response rewriting, and optional state persistence via file or storage adapters. 4. Sanitization: The documentation focuses on path prefixing and rewriting rather than explicit sanitization of the handled payloads.
Audit Metadata