isolet-widget-isolation

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of the isolet-js package via npm install and provides a usage example utilizing the unpkg.com CDN. unpkg.com is recognized as a well-known service for front-end development.
  • [COMMAND_EXECUTION]: The documentation includes standard CLI commands for the isolet-js tool, such as npx isolet-js init and npx isolet-js build. These commands are typical for JavaScript build tools and do not perform unexpected actions.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing component code. 1. Ingestion points: createIsolet API. 2. Boundary markers: Shadow DOM isolation. 3. Capability inventory: Limited to UI rendering. 4. Sanitization: Framework cleanup functions are documented. This represents a standard surface for a UI library.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 10:36 AM