nuxt-agent-ready-best-practices
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily instructional content designed to guide developers in implementing 'agent-ready' standards like MCP, WebMCP, and RFC-based discovery protocols.
- [COMMAND_EXECUTION]: The
package.jsondefines build and validation scripts (scripts/build.ts,scripts/validate.ts). These scripts use standard Node.js file system APIs to aggregate markdown files and validate YAML frontmatter. They do not process external input or perform unauthorized network requests. - [PROMPT_INJECTION]: The instructions do not contain patterns intended to bypass AI safety filters or override system prompts. On the contrary, the skill includes a 'Security Hardening' section that explicitly advises developers on how to prevent indirect XSS and API key leakage.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials or secrets were found. The skill provides correct guidance on using origin-restricted and non-privileged API keys for public-facing components.
Audit Metadata