ahooks
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation for a well-known open-source React library (ahooks). The analysis found no evidence of prompt injection, data exfiltration, or malicious persistence mechanisms.
- [EXTERNAL_DOWNLOADS]: The skill references standard package installation commands (npm, yarn) and well-known content delivery networks (e.g., jsdelivr.net) for loading UI components, which are standard practices in web development.
- [DATA_EXFILTRATION]: Usage of browser-based storage (localStorage, cookies) is documented correctly for its intended purpose of state persistence within the user's browser, with no signs of external data exfiltration.
- [DYNAMIC_EXECUTION]: The hook useExternal is documented for its purpose of dynamically loading CSS and JS files in web applications. The examples provided use legitimate or placeholder sources, presenting no security risk in this context.
Audit Metadata