absolute-ui
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFE
Full Analysis
The security analysis of the 'absolute-ui' skill did not identify any malicious patterns or vulnerabilities.
- [PROMPT_INJECTION]: The skill instructions focus on UI design principles and do not contain attempts to bypass safety filters or override agent behavior.
- [DATA_EXPOSURE]: The skill reads local configuration files (
.absolute.config.json,~/.absolute/config.json) to determine project styling conventions. This is standard behavior for a design tool and does not target sensitive system credentials or private data. - [REMOTE_CODE_EXECUTION]: There are no patterns of downloading and executing arbitrary code. The code snippets provided in the reference documentation are static examples for the user to implement in their own projects.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests data from local project files (e.g.,
package.json), it lacks dangerous capabilities such as automated command execution or network exfiltration, making the risk of indirect injection negligible. - [OBFUSCATION]: No obfuscated content, encoded strings, or hidden characters were found across the analyzed files.
Audit Metadata