navigation-and-routing
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill represents a legitimate developer tool for verifying app navigation structures. It includes a comprehensive self-test suite and uses a synced library for file operations and source code analysis.
- [INDIRECT_PROMPT_INJECTION]: The tool possesses an attack surface as it ingests project source files for auditing. However, the risk of injection is mitigated by the lexer's implementation in
check-lib.mjs, which masks comments and literal values, ensuring the analysis is performed on the code's structural facts rather than potentially untrusted text content. - [DYNAMIC_EXECUTION]: The
check-lib.mjslibrary utilizesimport()to dynamically load internal tooling andspawnSyncto execute self-tests. These operations are scoped to the project environment and are standard for a testing utility.
Audit Metadata