shollu-modern-design

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The interactive UI prototype in ui_kits/shollu-app/index.html loads React, ReactDOM, and Babel from the unpkg.com CDN. These are well-known services used for frontend development.
  • [COMMAND_EXECUTION]: No shell command execution or risky subprocess calls were found. The skill primarily consists of HTML, CSS, and client-side JavaScript.
  • [DATA_EXFILTRATION]: No network operations exfiltrating data or accessing sensitive file paths (e.g., SSH keys, credentials) were detected.
  • [REMOTE_CODE_EXECUTION]: The prototype uses @babel/standalone to transpile JSX in the browser at runtime. This is a common practice for 'no-build' prototypes and is limited to rendering the skill's own UI components.
  • [PROMPT_INJECTION]: The skill instructions in SKILL.md provide behavioral guidance for branding and attribution (crediting the original author) but do not attempt to override the agent's safety filters or core identity.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 03:08 AM
Security Audit — agent-trust-hub — shollu-modern-design