file-ingest-contracts
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides technical instructions for auditing file ingestion logic, including drag-and-drop event handling and object URL lifecycle management. All recommended practices align with standard web security and performance guidelines.
- [SAFE]: Local search patterns are non-malicious. The 'Quick probes' section uses
rgto search for standard browser APIs (dataTransfer,createObjectURL, etc.) within the user's project directory. - [SAFE]: Handling of bidirectional control characters is appropriate. The presence of U+202B (RTL embedding) and U+202C (pop directional formatting) in the evaluation data is used to test the agent's ability to recognize filename spoofing and I18N issues, which is a standard security auditing task.
- [SAFE]: All external references point to reputable documentation from MDN Web Docs and the OWASP Foundation.
Audit Metadata