ui-setup
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches design guidelines from the
VoltAgent/awesome-design-mdrepository on GitHub. - [EXTERNAL_DOWNLOADS]: Downloads font assets and configurations from well-known services including Google Fonts and JSDelivr.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from a remote Markdown file to generate code and style configurations, which creates an indirect prompt injection surface.
- Ingestion points: The agent is instructed to fetch and parse external Markdown files from the
VoltAgent/awesome-design-mdrepository. - Boundary markers: No delimiters or specific instructions are provided to ensure the agent ignores potential instructions within the fetched files.
- Capability inventory: The skill has capabilities to modify local project files, including CSS themes, font configurations, and the generation of React components.
- Sanitization: The skill lacks validation or sanitization of the fetched external content before it is processed.
Audit Metadata