Atlas / Skills / vuejs-ai / vue-skills

vue-skillsBLOCK

skills/vuejs-ai/vue-development-guides

Agent skills for Vue 3 development

Verdict
BLOCK
Grade
D
Trust score
69 /100
Version
1.0.0
Hosts
1 documented
License
MIT
Stars
3,123
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Agent skills for Vue 3 development.

🚧 Early Experiment / Community Project This repository is an early experiment in creating specialized skills for AI agents to enhance Vue 3 development. Skills are derived from real-world issues but may be incomplete due to hallucinations—please give feedback. If valuable, I plan to propose transferring this project to the Vue organization to benefit the wider community.

Installation

npx skills add vuejs-ai/skills

Claude Code Marketplace

An alternative for Claude Code users:

# Add marketplace
/plugin marketplace add vuejs-ai/skills

# Install all skills at once
/plugin install vue-skills-bundle@vue-skills

# Install individual skills
/plugin install vue-best-practices@vue-skills

# Install multiple skills
/plugin install vue-best-practices@vue-skills vue-router-best-practices@vue-skills

Usage

For most reliable results, prefix your prompt with use vue skill:

Use vue skill, 

This explicitly triggers the skill and ensures the AI follows the documented patterns. Without the prefix, skill triggering may be inconsistent depending on how closely your prompt matches the skill's description keywords.

Available Skills

Read from source at commit fd36057b6aa5OBSERVED · 2026-10-23
Advertisement
02

Install

Commands as the repository documents them. They are shown, not run.

npx skills add vuejs-ai/skills
npm install pinia
npm install -D @vitest/browser playwright
npm init playwright@latest
npm install -D vitest @vue/test-utils happy-dom
npm install -D vitest @vue/test-utils jsdom
03

Host compatibility

What the documentation claims. We have not run a compatibility test.

HostStatusNotes
claude-codementioned
04

What it tells the agent

The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: create-adaptable-composable
description: Create a library-grade Vue composable that accepts maybe-reactive inputs (MaybeRef / MaybeRefOrGetter) so callers can pass a plain value, ref, or getter. Normalize inputs with toValue()/toRef() inside reactive effects (watch/watchEffect) to keep behavior predictable and reactive. Use this skill when user asks for creating adaptable or reusable composables.
license: MIT
metadata:
  author: github.com/vuejs-ai
  version: "17.0.0"
compatibility: Requires Vue 3 (or above) or Nuxt 3 (or above) project
---

# Create Adaptable Composable

Adaptable composables are reusable functions that can accept both reactive and non-reactive inputs. This allows developers to use the composable in a variety of contexts without worrying about the reactivity of the inputs.

Steps to design an adaptable composable in Vue.js:
1. Confirm the composable's purpose and API design and expected inputs/outputs.
2. Identify inputs params that should be reactive (MaybeRef / MaybeRefOrGetter).
3. Use `toValue()` or `toRef()` to normalize inputs inside reactive effects.
4. Implement the core logic of the composable using Vue's reactivity APIs.

## Core Type Concepts

### Type Utilities

```ts
/**
 * value or writable ref (value/ref/shallowRef/writable computed)
 */
export type MaybeRef<T = any> = T | Ref<T> | ShallowRef<T> | WritableComputedRef<T>;

/**
 * MaybeRef<T> + ComputedRef<T> + () => T
 */
export type MaybeRefOrGetter<T = any> = MaybeRef<T> | ComputedRef<T> | (() => T);
```

### Policy and Rules

- Read-only, computed-friendly input: use `MaybeRefOrGetter`
- Needs to be writable / two-way input: use `MaybeRef`
- Parameter might be a function value (callback/predicate/comparator): do not use `MaybeRefOrGetter`, or you may accidentally invoke it as a getter.
- DOM/Element targets: if you want computed/derived targets, use `MaybeRefOrGetter`.

When `MaybeRefOrGetter` or `MaybeRef` is used: 
- resolve reactive value using `toRef()` (e.g. watcher source)
- resolve non-reactive value using `toValue()`

### Examples

Adaptable `useDocumentTitle` Composable: read-only title parameter

```ts
import { watch, toRef } from 'vue'
import type { MaybeRefOrGetter } from 'vue'

export function useDocumentTitle(title: MaybeRefOrGetter<string>) {
  watch(toRef(title), (t) => {
    document.title = t
  }, { immediate: true })
}
```

Adaptable `useCounter` Composable: two-way writable count parameter

```ts
import { watch, toRef } from 'vue'
import type { MaybeRef } from 'vue'

function useCounter(count: MaybeRef<number>) {
  const countRef = toRef(count)
  function add() {
    countRef.value++
  }
  return { add }
}
```
05

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeNA
L2Instruction surface (what it tells the agent)FAIL
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (4)

HIGHPrompt injection · prompt.hidden_comment · CWE-94, CWE-1427
skills/vue-debug-guides/reference/define-expose-before-await.md:144
<!-- If you must use top-level await, define expose first -->
Why it matters. directive hidden in a comment the user does not see rendered
Fix. remove the comment
HIGHPrompt injection · prompt.hidden_comment · CWE-94, CWE-1427
skills/vue-debug-guides/reference/select-initial-value-ios-bug.md:73
<!-- If you MUST have a pre-selected default, set the initial value to match -->
Why it matters. directive hidden in a comment the user does not see rendered
Fix. remove the comment
LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427
skills/vue-debug-guides/reference/state-ssr-cross-request-pollution.md:4
impactDescription: Singleton stores in SSR share state across all server requests, potentially leaking user data between requests
Why it matters. an instruction to move sensitive data to an outside destination
Fix. remove; a skill never needs the user's secrets off the machine
INFOPrompt injection · prompt.authority_framing · CWE-94, CWE-1427
skills/vue-debug-guides/reference/component-ref-requires-defineexpose.md:13
This catches many developers off-guard when migrating from Options API, where `this.$refs.child` gave full access to the child instance.

Gates applied: no_behavioural_pass.

Audited 2026-10-23 · audit v0.4.1 · source sha fd36057b6aa5full audit observations/trust-audit/skill/vuejs-ai__vue-development-guides.json · Report an issue / request a re-scan
06

Audit history

Every audit this skill has had.

DateSourceVerdictGradeScoreChange
2026-10-23fd36057b6aa5BLOCKD69first audit
07

Questions

What does the vue-development-guides — vuejs-ai/skills skill do?

Agent skills for Vue 3 development

Is vue-development-guides — vuejs-ai/skills safe to install?

No — not without reading the findings first. The audit graded it D (69/100) and found 2 critical or high issues in the source. Each one is listed on this page with the file and line it is on.

What can vue-development-guides — vuejs-ai/skills access on my machine?

The audit observed no filesystem, network or shell use at all in its source.

Which assistants does vue-development-guides — vuejs-ai/skills work with?

Its documentation mentions claude-code. That is what the text claims, not a compatibility test we ran.

How current is this page?

The grade is for one exact copy of the source (fd36057b6aa5), read on 2026-10-23. The repository is watched, and a new audit runs when it changes — this is the first audit.

Add this badge to your README

Shows this page's audit result and links back to it. It updates when the audit does.

ModelsAtlas audit badge

Markdown
[![ModelsAtlas audit: vue-skills](https://modelsatlas.com/skills/vuejs-ai/vue-development-guides/badge.svg)](https://modelsatlas.com/skills/vuejs-ai/vue-development-guides/)

Not your listing, or something out of date? Claim or update your listing.

Advertisement