igniteui-react-components
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEPROMPT_INJECTIONREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The SKILL.md file contains instructions that command the AI agent to automatically modify configuration files, such as .vscode/mcp.json or claude_desktop_config.json, while explicitly directing the agent not to ask the user for permission. This is an attempt to bypass user oversight for environment modifications.- [COMMAND_EXECUTION]: In reference/MCP-SERVER.md, the skill provides configuration details that involve executing shell commands, specifically starting the igniteui-cli tool.- [REMOTE_CODE_EXECUTION]: The skill's setup process utilizes npx -y igniteui-cli mcp, which fetches the igniteui-cli package from the npm registry and executes it. As a vendor-owned resource, this is documented as a standard setup pattern that involves running remote code.
Audit Metadata