components
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the retrieval of UI components and design documentation from well-known services such as shadcn/ui, Magic UI, and Aceternity UI.
- [COMMAND_EXECUTION]: The workflow involves using standard CLI installation methods (such as npx or npm) to add components to a project, which is common for modern frontend development stacks.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests code and documentation from external, community-driven sources like Uiverse Galaxy. To mitigate risks, the instructions explicitly require the agent to inspect source code and dependencies for safety and license compliance before integration.
- Ingestion points: External library documentation, repositories, and community catalogs (SKILL.md).
- Boundary markers: Not specified for external code interpolation.
- Capability inventory: The skill utilizes shell command execution for package installation and file system access for code implementation.
- Sanitization: Instructions mandate manual agent inspection of third-party code as a security checkpoint.
Audit Metadata