smile-io-integration
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized operations were detected. The skill documentation describes standard architectural patterns for UI development.- [EXTERNAL_DOWNLOADS]: The skill references the '@replohq/sdk' package, which is a legitimate library owned by the skill author.- [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface for data processed at runtime.
- Ingestion points: Data loaders (SmileVipTiersLoader, SmileEarningRulesLoader, SmileRewardsLoader) in SKILL.md ingest external data from Smile.io.
- Boundary markers: The components use standard React interpolation for data rendering.
- Capability inventory: Capabilities are limited to data fetching and UI display within the provided examples.
- Sanitization: Relies on React's default output encoding for text content.
Audit Metadata