gpui-component
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches supplemental technical references and component documentation from gpui-kit.com. These are vendor-provided resources meant to provide the AI agent with up-to-date API details for the gpui-component library.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Remote markdown and text documentation are retrieved from https://gpui-kit.com/llms-full.txt and https://gpui-kit.com/docs/components/{name}.md (SKILL.md).
- Boundary markers: The instructions do not specify boundary markers or provide explicit warnings for the agent to ignore instructions that might be embedded within the fetched markdown files.
- Capability inventory: The agent is tasked with generating Rust code, designing UI layouts, and making architectural decisions based on the content of these external files (SKILL.md, references/coding-guides.md).
- Sanitization: No sanitization or validation of the remote documentation is described.
Audit Metadata