skills/vercel-labs/emulate/nuxt/Gen Agent Trust Hub

nuxt

Pass

Audited by Gen Agent Trust Hub on Jul 6, 2026

Risk Level: SAFE
Full Analysis
  • [Dependency Management]: The skill utilizes several packages under the @emulators/ scope (e.g., @emulators/adapter-nuxt, @emulators/github). These are standard dependencies for the functionality described and are consistent with the author's ecosystem.
  • [Tooling Constraints]: The configuration includes a restriction on the Bash tool, limiting its execution to specific npx emulate:* commands. This is a security-conscious practice that applies the principle of least privilege to the agent's capabilities.
  • [Persistence Logic]: The skill documents how to persist emulator state to the local file system (e.g., .emulate/state.json) or via Nitro's storage layer. While this involves file writing, it is a documented feature for maintaining mock data across sessions in development environments.
  • [External Request Processing]: The createEmulateHandler function ingests and processes incoming network requests to handle emulator traffic. This creates a data ingestion surface where the skill rewrites headers and response bodies to maintain the same-origin proxying. As with any middleware handling external input, standard web security practices in the underlying Nuxt application are recommended.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 6, 2026, 02:25 AM
Security Audit — agent-trust-hub — nuxt