next-loading-skeleton
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx shadcn@latestto install UI components. This is a well-known community tool for building user interfaces and is considered a safe external reference for its intended purpose. - [COMMAND_EXECUTION]: The skill includes a Python script (
scripts/generate-loading.py) designed to generate React code templates based on text descriptions. The script uses keyword matching and regular expressions to select and parameterize static templates, which is a routine automation task. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied layout descriptions to generate code. It mitigates potential injection risks by using strict regular expressions to extract numeric values and limit template selection to predefined keywords, preventing arbitrary text from influencing the core structure of the generated code.
Audit Metadata