Skills
skills/piotrski/agent-react-devtools/react-devtools/Gen Agent Trust Hub

react-devtools

Pass

Audited by Gen Agent Trust Hub on Apr 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The agent-react-devtools init command modifies project files such as vite.config.ts, app/layout.tsx, or src/index.tsx to inject connection imports. This is an expected behavior for a developer setup tool.\n- [EXTERNAL_DOWNLOADS]: The skill uses npx to fetch and execute the agent-react-devtools package from the npm registry for initialization and environment setup.\n- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface.\n
  • Ingestion points: Application data including props, state, and hooks is ingested via commands like get component and get tree as described in SKILL.md.\n
  • Boundary markers: No explicit boundary markers or delimiters are used to distinguish application data from instructions.\n
  • Capability inventory: The skill has access to the Bash tool to run CLI commands.\n
  • Sanitization: Values exceeding 60 characters are truncated as noted in the component inspection section of SKILL.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 3, 2026, 03:51 AM