add-page-route
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or data exfiltration techniques were detected in the skill instructions or metadata.
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates high security awareness by identifying URL search parameters and path parameters as user-controlled input. It mandates the use of Zod schemas with
.catch()fallbacks for validation, which effectively mitigates common injection risks in web routing. - [COMMAND_EXECUTION]: The skill requires access to standard development tools (linting, testing, building). These tools are used for their intended purpose in a developer workflow and do not show signs of unauthorized or dangerous command execution.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns were found. The skill relies on local environment tools and scripts for validation, such as
python3 core/scripts/validate-all.py, which is standard for repository maintenance. - [CREDENTIALS_UNSAFE]: No hardcoded credentials or sensitive file paths (like
.envor.ssh) are accessed or exposed. - [PROMPT_INJECTION]: The instructions contain no attempts to override agent behavior or bypass safety guidelines. Instead, it provides 'Security Guardrails' based on OWASP ASI to ensure the agent maintains goal alignment and security during implementation.
Audit Metadata