ui-skills
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements a command (
/ui-skills <file>) that ingests and processes external file content for review. This functionality presents a surface area where malicious instructions could be embedded within the source code of the file being audited, potentially attempting to bypass the agent's constraints or influence its output during the review process. - [EXTERNAL_DOWNLOADS]: The skill mandates or recommends the use of various external libraries and component primitives, including
motion/react,tw-animate-css,clsx,tailwind-merge,Base UI,React Aria, andRadix. These references involve well-known, industry-standard packages from trusted open-source ecosystems and are considered safe under the trusted source guidelines.
Audit Metadata