Agent skill · Audited from source
store-data-structures
skill · lobehub/lobehubNOASSERTION licenceAudited 31 Oct 2026 · source f6210ec238fd
Is it safe? With care — CAUTION, grade B (89/100). We read this skill's source at commit f6210ec238fd and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 4 findings, 0 critical or high. What it does: Explicit compatibility entry for Zustand data-shape guidance.
Cite
Cite this page
ModelsAtlas. “store-data-structures (lobehub/lobehub)”. Retrieved 31 Oct 2026. https://modelsatlas.com/skills/lobehub/store-data-structures
Trust audit
Audit 0.4.1 · source read 31 Oct 2026
CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 16,667 of 17,602 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | WARN | 4 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (4)
MEDIUMInventory / provenanceinv.symlink · .claude/skills
.claude/skills
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · .codex/skills
.codex/skills
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · .cursor/skills
.cursor/skills
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · .gemini/skills
.gemini/skills
- Why
- link not followed
- Fix
- —
Audit 0.4.1 · source sha f6210ec238fd · 31 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherlobehub GitHub organizationOwner of the repository this skill is read from
- Source folderlobehub/lobehub/.agents/skills/store-data-structuresThe exact folder we audited
- LicenceNOASSERTIONAs the repository states it
- Commit pinned for this verdictf6210ec238fdA new audit runs when the source changes
- Repository statusNot archivedPushed today
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Explicit compatibility entry for Zustand data-shape guidance.
--- name: store-data-structures description: 'Explicit compatibility entry for Zustand data-shape guidance.' disable-model-invocation: true user-invocable: true --- # Store Data Structures Read [Zustand data structures](../zustand/references/data-structures.md) for list/detail types, maps, reducers and shared type sources. The `zustand` skill is the automatic entry for store work. A domain whose reads go through `local-replica` keeps its data in the same id-keyed `<domain>Map` views, plus one `<domain>Replica` bookkeeping field per view; its resources live in a sibling `projection.ts`. See [replica-backed server data](../zustand/SKILL.md#replica-backed-server-data).
Excerpt, first 677 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit f6210ec
git clone https://github.com/lobehub/lobehub git -C lobehub checkout f6210ec238fd
The author documents no install command, so this uses the repository directly. Our verdict covers commit f6210ec238fd only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- !CAUTION B 89 / 100
first audit · source
f6210ec238fd
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/lobehub/store-data-structures/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
All data & analysis skills →lobehub/lobehub
Use for TypeScript style and type safety when editing TS/TSX/MTS, including imports, async code and error suppression.
lobehub/lobehub
Use for Upstash Workflow/QStash handlers, triggers, durable steps and async fan-out.
lobehub/lobehub
Use for Vitest tests, mocks, coverage and failing-test diagnosis.
lobehub/lobehub
Use for TSX components, UI libraries, styling, state locality, layout, render performance and memoization.
lobehub/lobehub
Use for the OSS repository map, code-layer lookup, apps/packages/src ownership and business stubs.
lobehub/lobehub
Use for modals, dialogs and confirmations with createModal, confirmModal, ModalHost or base-ui modal APIs.
Add this badge to your README
[](https://modelsatlas.com/skills/lobehub/store-data-structures/)
<a href="https://modelsatlas.com/skills/lobehub/store-data-structures/"><img src="https://modelsatlas.com/skills/lobehub/store-data-structures/badge.svg" alt="ModelsAtlas: CAUTION B"></a>
Questions about store-data-structures
What does the store-data-structures skill do?
Is store-data-structures safe to install?
What can store-data-structures access on my machine?
How current is this page?
Sources
- github.com/lobehub/lobehub/tree/canary/.agents/skills/store-data — the audited source at commit f6210ec238fd and every finding aboveObserved · 31 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the store-data-structures skill do?
- Is store-data-structures safe to install?
- What can store-data-structures access on my machine?