site-generation
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches UI components using the shadcn/ui CLI and installs additional agent skills from Vercel Labs' public repository to ensure code quality.
- [COMMAND_EXECUTION]: Executes shell commands to scaffold projects, install dependencies, and run build scripts. Examples include
npx shadcn@latest add,npm install, andnpm run build. - [INDIRECT_PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection through the processing of untrusted markdown files.
- Ingestion points: Markdown research reports provided by the user (parsed in
SKILL.md). - Boundary markers: Supports explicit HTML comment markers like
<!-- interactive: calculator -->to guide parsing, but lacks explicit instructions to ignore potentially malicious embedded prompts within the report text. - Capability inventory: The skill writes React components, Vite configuration files, and data structures to the file system, and executes package installation and build commands.
- Sanitization: Content is rendered via
react-markdownwithremark-gfm, but the mapping logic that determines component composition is driven by parsing the structure of the input document. - [DYNAMIC_EXECUTION]: Generates executable React code and project configuration files (e.g.,
vite.config.js,reportData.js) at runtime based on the detected structure and markers in the input markdown documents.
Audit Metadata