makepad-2-0-widgets

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical reference for Makepad 2.0 UI widgets. All files (SKILL.md, widget-advanced.md, and widget-catalog.md) contain legitimate documentation and code examples consistent with UI framework development.
  • [INDIRECT_PROMPT_INJECTION]: The documentation identifies widgets that process untrusted data, such as Markdown, Html, and Svg. It proactively addresses security by instructing developers to treat these as untrusted resources, restrict allowed network schemes/hosts, and avoid logging sensitive text input contents. This identifies a potential attack surface but provides appropriate mitigation guidance.
  • [COMMAND_EXECUTION]: While the skill describes Rust-side event handling and drawing logic, it does not include any instructions or patterns for executing arbitrary shell commands or spawning unsafe subprocesses.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 03:20 AM