dwf-coding
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The core instructions in 'SKILL.md' define a structured coding workflow. No patterns of prompt injection, safety filter bypasses, or instructions to reveal system prompts were detected.
- [SAFE]: The skill uses local boilerplate files and configurations in the 'assets/' directory. These templates utilize reputable open-source libraries such as React, Vite, and Tailwind CSS.
- [SAFE]: Dependency lock files reference 'registry.npmmirror.com', which is a well-known and widely used mirror of the official NPM registry, particularly used in Chinese development environments for performance.
- [SAFE]: Command execution is restricted to standard development tasks like linting ('eslint'), type checking ('tsc'), and building ('vite build'). No high-risk or arbitrary command execution patterns were found.
- [SAFE]: No obfuscation techniques, hidden URLs, or hardcoded sensitive credentials were found in the instructions or template files.
Audit Metadata