test-component
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill employs standard
yarncommands (yarn sync,yarn dev,yarn build,yarn link) to manage the local development environment, synchronize source files, and execute test applications (kitchen-sink and website). These are expected behaviors for a development-focused skill. - [EXTERNAL_DOWNLOADS]: The workflow involves using
npxto fetch and execute official tools from the vendorgluestack, such ascreate-gluestackandgluestack-ui. As these tools originate from the skill's author and are used for their intended purpose of project initialization and component management, they are considered safe. - [INDIRECT_PROMPT_INJECTION]: The skill accepts user input for a component name, which is then interpolated into a shell command (
npx gluestack-ui add [component-name]). This represents a standard interaction pattern for developer tools, where the input is used to specify parameters for local CLI execution.
Audit Metadata