tailrocks-web-design
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted codebase data including fixtures and repository files to generate UI components. This is a standard surface for code-centric skills and is mitigated by explicit instructions in the runtime trust reference to treat repository data as evidence only.
- [DYNAMIC_EXECUTION]: The skill generates React components and routing logic that are executed locally by a Vite development server for visual iteration. This behavior is the core intended purpose of the skill and is guarded by environment-specific checks.
- [EXTERNAL_DOWNLOADS]: The skill references the use of the shadcn CLI for adding UI components, which is a well-known and trusted developer tool in the React ecosystem.
Audit Metadata