tech-logos
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to download and install UI components from the
@elementsregistry usingnpx shadcn@latest add. These components are hosted on a GitHub repository (github.com/crafter-station/elements) and documented at an external site (tryelements.dev). This is standard behavior for a component library skill. - [COMMAND_EXECUTION]: The instructions include shell commands to install packages and scan local directories (
ls registry/default/blocks/logos/ | sed ...). These are intended for use in a developer environment and follow standard patterns for theshadcnecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill uses a template to generate pre-filled GitHub issue URLs using user-provided logo names (e.g.,
{Name}). While this interpolates external data into a link, the process requires manual user confirmation (clicking the link) and does not execute commands automatically.
Audit Metadata