next-loading-skeleton
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or data exfiltration attempts were detected in the skill instructions or the provided script.\n- [COMMAND_EXECUTION]: The skill recommends installing UI components via the well-known shadcn/ui CLI tool (
npx shadcn@latest add ...), which is a standard procedure in the Next.js ecosystem.\n- [COMMAND_EXECUTION]: The skill includes a local utility script (scripts/generate-loading.py) used to generate React component templates. The script uses only standard Python libraries (sys,re) and performs safe string manipulations based on numeric extraction from user input.\n- [SAFE]: Indirect prompt injection risk is negligible as the generation script sanitizes input by extracting only integers for template interpolation, preventing any malicious code from being injected into the generated output.
Audit Metadata