composable-components

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill consists entirely of Markdown documentation and React code snippets illustrating design patterns. No malicious behavior, command execution, or data exfiltration patterns were identified.
  • [INDIRECT_PROMPT_INJECTION]: The skill involves the analysis and refactoring of project source files and package configuration.
  • Ingestion points: Reads package.json and React component source files as instructed in house-rules.md.
  • Boundary markers: None explicitly defined for untrusted code segments.
  • Capability inventory: File creation and modification for component authoring and refactoring.
  • Sanitization: Not present.
  • Note: As per safety guidelines, this attack surface is noted as a standard requirement for the skill's purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 04:29 AM