kiso
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and usage examples for the 'kiso' Rails UI library. Analysis of the provided files and installation instructions did not reveal any malicious patterns, such as prompt injection, data exfiltration, or unauthorized command execution.
- [INDIRECT_PROMPT_INJECTION]: The skill defines UI components that process data for rendering in Rails templates. This presents a common web attack surface where untrusted data could be passed to components; however, the library utilizes standard Rails rendering patterns which benefit from built-in security features like automatic HTML escaping.
- [EXTERNAL_DOWNLOADS]: The 'bin/kiso-icons' tool downloads icon definitions from Iconify, a well-known icon provider. This is a legitimate feature for asset management within the library's workflow.
Audit Metadata