ui-build
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and provides installation commands for well-known frontend frameworks and libraries, including Astro, SvelteKit, Vite, Next.js, and @use-gesture/react. All downloads target official repositories or established package registries associated with trusted organizations.\n- [COMMAND_EXECUTION]: Provides standard initialization and build commands (e.g.,
bun create,bun run build) for frontend projects. These are legitimate development tools and are not used for malicious purposes or outside the user's project context.\n- [INDIRECT_PROMPT_INJECTION]: As a tool designed to build UI based on user descriptions, it possesses a standard input surface for potential indirect prompt injection. The skill guidelines emphasize UI/UX principles and semantic structure which limits the risk of the agent misinterpreting data as system instructions.\n- [SAFE]: The skill includes a dedicated section for security advisories related to the frameworks it supports, demonstrating a proactive approach to supply chain security and dependency management.
Audit Metadata