pick-ui-library
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a static lookup resource for frontend library recommendations. It does not contain executable code, privileged commands, or data exfiltration logic.
- [EXTERNAL_DOWNLOADS]: The skill lists and links to various open-source libraries and their official documentation/GitHub repositories. These include well-known services such as Vercel and reputable community projects. These references are used solely for informational purposes to assist in library selection.
- [INDIRECT_PROMPT_INJECTION]: The skill advises the agent to read
package.jsonto identify existing project dependencies. This is a standard analysis task used to prevent redundant library recommendations and does not introduce specific security vulnerabilities.
Audit Metadata