magic-ui-generator-v2
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-defined UI requirements to generate and integrate project code, creating a potential surface for indirect prompt injection.
- Ingestion points: User-provided descriptions for components like pricing tables or contact forms in SKILL.md.
- Boundary markers: No explicit delimiters or instructions to disregard instructions within the data are provided.
- Capability inventory: Ability to write TypeScript code to the project and install Node.js packages.
- Sanitization: No automated sanitization or safety filtering of the generated output is defined.
- [EXTERNAL_DOWNLOADS]: The skill relies on external web services and refers to third-party repositories for its functionality.
- Evidence: Directs the agent to use '21st.dev/magic' for component exploration and references 'github.com/sickn33/antigravity-awesome-skills' as its source origin.
Audit Metadata