base-ui
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEMETADATA_POISONINGEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
- [METADATA_POISONING]: The skill's metadata in SKILL.md contains a future release date (2026-09-04). Additionally, the npm package link provided in the frontmatter points to @base-ui-components/react, which is inconsistent with the standard @base-ui/react package name used throughout the actual component documentation and code examples.
- [EXTERNAL_DOWNLOADS]: The skill provides a link to an npm package (@base-ui-components/react) that does not match the official MUI Base UI package name (@base-ui/react). While likely a typo, this could lead an automated agent or user to install an unintended package if it existed on the registry.
Audit Metadata