peach-gen-ui
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to perform validation tasks using local shell commands including
bunx vue-tsc,bun run lint:fix, andbun run build. These operations are used solely to verify the integrity and correctness of the generated front-end code. - [EXTERNAL_DOWNLOADS]: The documentation suggests the inclusion of established community libraries such as
v-calendarandvuedraggable. These are referenced as standard dependencies required for advanced UI patterns and do not involve untrusted remote code execution. - [PROMPT_INJECTION]: The skill incorporates a process for analyzing a local
DESIGN.mdfile to guide the generation of UI styles. This represents an indirect prompt injection surface where the agent processes external file content. 1. Ingestion point:DESIGN.md(Step 0). 2. Boundary markers: Absent. 3. Capability inventory: File-system write operations (code generation) and shell command execution (bun). 4. Sanitization: Absent.
Audit Metadata