test-component

Pass

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill employs standard yarn commands (yarn sync, yarn dev, yarn build, yarn link) to manage the local development environment, synchronize source files, and execute test applications (kitchen-sink and website). These are expected behaviors for a development-focused skill.
  • [EXTERNAL_DOWNLOADS]: The workflow involves using npx to fetch and execute official tools from the vendor gluestack, such as create-gluestack and gluestack-ui. As these tools originate from the skill's author and are used for their intended purpose of project initialization and component management, they are considered safe.
  • [INDIRECT_PROMPT_INJECTION]: The skill accepts user input for a component name, which is then interpolated into a shell command (npx gluestack-ui add [component-name]). This represents a standard interaction pattern for developer tools, where the input is used to specify parameters for local CLI execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 2, 2026, 01:53 PM
Security Audit — agent-trust-hub — test-component