21st-ui-explore
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the '21st' command-line interface to perform searches, generate UI variants, and initialize design context. These commands are vendor-owned resources used for the skill's primary purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests existing UI source code and the '.21st/design.json' configuration file to provide context for AI-driven design generation. 1. Ingestion points: Reads '.21st/design.json' and local product UI files. 2. Boundary markers: No explicit markers or 'ignore' instructions are used for the ingested data. 3. Capability inventory: Command execution via '21st' CLI tool. 4. Sanitization: The skill instructions do not specify sanitization for the ingested project context. This surface is considered acceptable as it is necessary for the intended design-grounding functionality.
Audit Metadata