uikit
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool for standard development operations, such as interacting with Git or running existing browser automation and development servers. It contains specific safeguards against unauthorized installation of software or starting unmanaged services. - [INDIRECT_PROMPT_INJECTION]: As a tool that audits and generates code based on repository content, the skill ingests data from external files which could theoretically contain malicious instructions.
- Ingestion points: Project files including
DESIGN.md, source code components, and README files are read from the repository. - Boundary markers: No specific delimiters or safety warnings are implemented to differentiate between data and instructions in ingested files.
- Capability inventory: The skill has the ability to read and write files and execute shell commands via the
Bashtool. - Sanitization: The skill does not explicitly describe sanitization or filtering of the content read from project files.
Audit Metadata