status-page-ui
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches UI components from the official OpenStatus registry at
https://openstatus.dev/r/status-complete.jsonand related endpoints using theshadcnCLI. This is a standard integration method for this vendor's UI library. - [COMMAND_EXECUTION]: Provides standard development instructions for installing dependencies via
npm(e.g.,@openstatus/react,@openstatus/sdk-node) and adding components vianpx shadcn. These commands are expected for the skill's primary purpose. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted data by fetching monitor statuses, incident reports, and maintenance updates from the OpenStatus API to render them in a UI.
- Ingestion points: Data is fetched via
client.statusPage.v1.StatusPageService.getStatusPageContentinSKILL.mdandreferences/advanced-patterns.md. - Boundary markers: None explicitly specified for the fetched text data, though React's standard rendering provides basic protection against script injection.
- Capability inventory: The skill focus is limited to UI rendering and data management via the SDK; no dangerous system-level capabilities (like arbitrary subprocess execution) are exposed to the data processing logic.
- Sanitization: The skill relies on standard React component behavior for rendering strings from the API.
Audit Metadata