21st-ui-review
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a command-line interface to perform UI reviews, generate JSON reports, and apply automated fixes to the source code.
- Evidence: Uses
21st review <path>,21st review <path> --json, and21st review <path> --fixto audit and modify components (SKILL.md). - Evidence: Instructs the agent to run project-specific tests after applying fixes (SKILL.md).
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection because it ingests untrusted data from the project environment while possessing the capability to execute shell commands.
- Ingestion points: The skill reads project source code and the
.21st/design.jsonconfiguration file (SKILL.md). - Boundary markers: No specific delimiters or instructions to ignore embedded prompts in the ingested files are present.
- Capability inventory: The skill can execute shell commands (
21st review, project tests) and perform file-write operations (--fixflag) (SKILL.md). - Sanitization: There is no evidence of sanitization or validation of the content read from project files before processing.
Audit Metadata