ui-templates
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads template asset packages in ZIP format from a Google Cloud Storage bucket.
- Evidence:
curl -sL "{downloadUrl}" -o /tmp/template.zipfound inSKILL.md. - Context: The URLs (e.g.,
https://storage.googleapis.com/starchild-bucket-testnet/ui-templates/styleshout--hudson.zip) point to a well-known service and the bucket name matches the author's namespace (starchild). - [COMMAND_EXECUTION]: The skill utilizes the
bashtool to perform asset management tasks on the downloaded files. - Evidence: The instructions in
SKILL.mddirect the agent to executecurl,mkdir,unzip, andrmto prepare the template files for use. - Context: These commands are benign utility operations necessary for the primary function of the skill.
Audit Metadata