makepad-2-0-widgets
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for Makepad 2.0 UI widgets. All files (SKILL.md, widget-advanced.md, and widget-catalog.md) contain legitimate documentation and code examples consistent with UI framework development.
- [INDIRECT_PROMPT_INJECTION]: The documentation identifies widgets that process untrusted data, such as
Markdown,Html, andSvg. It proactively addresses security by instructing developers to treat these as untrusted resources, restrict allowed network schemes/hosts, and avoid logging sensitive text input contents. This identifies a potential attack surface but provides appropriate mitigation guidance. - [COMMAND_EXECUTION]: While the skill describes Rust-side event handling and drawing logic, it does not include any instructions or patterns for executing arbitrary shell commands or spawning unsafe subprocesses.
Audit Metadata