data-table
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install dependencies from the official npm registry (
@virtuoso.dev/data-table) and to use the shadcn CLI to add components from the library author's GitHub repository (petyosi/react-virtuoso). These are standard, legitimate installation paths for this library. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the display of external data through local and remote models. While this represents a data ingestion surface, the library uses standard React rendering which provides automatic escaping for rendered content, and no malicious patterns targeting the agent's behavior were detected.
- Ingestion points: External data is ingested via the
remoteModel(e.g., inreferences/8.examples/08.remote-offset.md) andlocalModel(e.g., inreferences/8.examples/01.basic-table.md). - Boundary markers: Not explicitly required for a UI library; standard data binding is used.
- Capability inventory: No high-risk capabilities such as command execution, file system writes, or arbitrary network requests are present in the skill's code.
- Sanitization: The library relies on standard React JSX rendering for output sanitization.
Audit Metadata