skills/virtuoso-dev/skills/data-table/Gen Agent Trust Hub

data-table

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs users to install dependencies from the official npm registry (@virtuoso.dev/data-table) and to use the shadcn CLI to add components from the library author's GitHub repository (petyosi/react-virtuoso). These are standard, legitimate installation paths for this library.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the display of external data through local and remote models. While this represents a data ingestion surface, the library uses standard React rendering which provides automatic escaping for rendered content, and no malicious patterns targeting the agent's behavior were detected.
  • Ingestion points: External data is ingested via the remoteModel (e.g., in references/8.examples/08.remote-offset.md) and localModel (e.g., in references/8.examples/01.basic-table.md).
  • Boundary markers: Not explicitly required for a UI library; standard data binding is used.
  • Capability inventory: No high-risk capabilities such as command execution, file system writes, or arbitrary network requests are present in the skill's code.
  • Sanitization: The library relies on standard React JSX rendering for output sanitization.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 09:17 PM