21st-ui-build
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from local project files and external search results which could contain malicious instructions designed to influence UI generation or file modifications.
- Ingestion points: Reads
.21st/design.json,.21st/DESIGN.md, existing project components, and tokens (SKILL.md). - Boundary markers: No explicit boundary markers or sanitization instructions for the ingested design context are defined.
- Capability inventory: Executes shell commands via the
21stCLI, performs component installation, and modifies project source files (SKILL.md). - Sanitization: The instructions focus on preserving design identity but do not specify security sanitization for content retrieved from external UI searches.
- [COMMAND_EXECUTION]: The skill relies on the execution of the
21stCLI tool for core operations. - Evidence: Uses
21st init,21st search,21st generate, and21st reviewto interact with the project and fetch UI assets.
Audit Metadata