21st-ui-explore
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the vendor-provided
21stCLI tool to perform various operations including environment initialization (21st init), component searching (21st search), and UI variant generation (21st generate). These actions are consistent with the skill's stated purpose of UI exploration. - [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from both local and remote sources which could be used to influence the agent's output or execution flow.
- Ingestion points: Data is ingested from the local
.21st/design.jsonfile and the output of the21st searchcommand. - Boundary markers: The instructions do not define explicit boundary markers or delimiters to isolate the ingested design data from the agent's system instructions.
- Capability inventory: The agent has the ability to execute shell commands via the
21stCLI and record decisions back into the local.21st/design.jsonfile. - Sanitization: There is no evidence of sanitization or schema validation performed on the design JSON or search results before they are incorporated into the agent's context.
Audit Metadata