ui-setup

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches design specifications from a community repository (VoltAgent/awesome-design-md) to extract visual style parameters like color palettes. It also references font assets from well-known providers such as Google Fonts and jsDelivr.
  • [PROMPT_INJECTION]: Analyzed for potential indirect prompt injection due to external data ingestion.
  • Ingestion points: Markdown design files fetched from raw.githubusercontent.com at runtime (Step 3).
  • Boundary markers: None explicitly defined to delimit external content.
  • Capability inventory: Writing to project files including css/theme.css, css/fonts.css, css/base.css, src/app/App.tsx, and STYLESEED.md.
  • Sanitization: The skill logic is scoped to extracting specific design attributes (colors, text colors, background colors) rather than executing or following instructions within the fetched files.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 09:22 AM
Security Audit — agent-trust-hub — ui-setup