widget-generator
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill provides instructional templates for creating UI components. All code snippets use standard React and Next.js patterns.
- [SAFE]: Command execution is limited to standard development tasks (
npm run dev,npx tsc) intended for local environment verification. - [SAFE]: No external network operations or remote code downloads were identified in the instructions or provided snippets.
- [INDIRECT_PROMPT_INJECTION]: As a code generation assistant, the skill has a theoretical attack surface where user-provided widget content could contain malicious instructions. However, this is inherent to the task and no specific vulnerabilities or lack of sanitization guidance were noted beyond standard usage.
Audit Metadata