pick-ui-library
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a reference for selecting reputable, open-source frontend libraries. All provided URLs point to official project sites and documentation.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to examine the project's
package.jsonfile to check for existing dependencies. - Ingestion points: Reads
package.jsonfrom the local file system (SKILL.md). - Boundary markers: No specific delimiters or protective instructions are included for handling the ingested content.
- Capability inventory: The skill enables the agent to recommend, install, and configure libraries, which involves file modifications and command execution through the agent's core toolset (SKILL.md).
- Sanitization: There is no explicit requirement for the agent to sanitize or validate the data retrieved from project configuration files.
Audit Metadata