building-landing-home
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation references UI components and icons from
@lobehub/uiand@lobehub/icons. These are official resources provided by the skill vendor and are used as intended for building front-end interfaces. - [INDIRECT_PROMPT_INJECTION]: The skill instructions include templates for the
AgentSkillCardcomponent, which is designed to pass instructions to other agents via a URL (e.g.,skills.md). While this creates a pathway for instruction ingestion, it is a documented platform feature for multi-agent workflows and does not execute untrusted data within the skill's own context. - [COMMAND_EXECUTION]: The provided React code examples contain common shell commands for package management (
pnpm add,npx skills add). These are provided strictly as documentation for developers to manage their local project dependencies and are not executed automatically by the agent.
Audit Metadata