ui-craft
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads content from a third-party GitHub repository (github.com/educlopez/ui-craft) using
npx skills addandnpxexecution for an MCP server. - [COMMAND_EXECUTION]: Provides instructions to execute shell commands (e.g.,
npx skills add,grep,echo) to verify installation status and perform the installation of the skill variants. - [DYNAMIC_EXECUTION]: Mentions the use of an MCP server (
ui-craft-mcp) which is started vianpx. This involves downloading and executing a remote npm package at runtime.
Audit Metadata