design-shiny-ui
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and code snippets are standard for R Shiny development and match the declared metadata.
- [EXTERNAL_DOWNLOADS]: Fetches fonts from Google Fonts using
bslib::font_googleinSKILL.md. This targets a well-known service and is standard practice for theming. - [INDIRECT_PROMPT_INJECTION]: The skill identifies ingestion points via standard Shiny inputs like
selectInputandsliderInputinSKILL.md. While boundary markers and explicit sanitization logic are absent in the examples, the capability inventory is limited to standard reactive rendering (renderUI,renderPlot). This represents a standard application attack surface rather than a malicious vector targeting the AI agent.
Audit Metadata