custom-angular-component-creator
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
agent-browserpackage from the global npm registry as a prerequisite for its visual preview functionality. - [DYNAMIC_EXECUTION]: The skill employs a dynamic authoring model where a 'light harness' (Angular application) is generated by a remote server, materialized locally, and executed to provide screenshot-driven previews. This involves runtime compilation and execution of generated code.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external inputs such as design briefs and visual target screenshots to guide code generation, creating a potential surface for indirect prompt injection.
- Ingestion points: Requirements briefs and target screenshots provided via the
requirements-gatheringskill or conversation context. - Boundary markers: No specific delimiters or warnings for embedded instructions are defined in the authoring instructions.
- Capability inventory: The skill can execute shell commands via the
dxsCLI, write files to the local system, performnpm installoperations, and run a local web server. - Sanitization: No explicit sanitization or validation of the input designs or briefs is mentioned prior to code generation.
- [COMMAND_EXECUTION]: The skill relies extensively on the
dxsCLI to manage the component lifecycle, including creating local working copies, generating mock data, and pushing code to the Studio platform. It also provides instructions to disable SSL verification (verify_ssl false) for the local development API athttps://localhost:5101, which is a security anti-pattern, although restricted to the local environment.
Audit Metadata