image-upload
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of markdown documentation, UI pattern guidelines, and static HTML/CSS examples. There are no scripts, binaries, or executable commands provided.
- [EXTERNAL_DOWNLOADS]: The skill references several well-known and established NPM packages including
react-dropzone,uppy, andfilepond. These are standard libraries for handling file uploads and do not represent a security risk in this context. - [INDIRECT_PROMPT_INJECTION]: The skill documents an interface for ingesting user-provided files (Image Upload). While this creates a data ingestion surface, the documentation includes best practices for validation, state management, and error handling to mitigate risks. There is no automated processing of untrusted data within the skill itself.
- [SAFE]: The documentation points to trusted resources such as W3C (WCAG), MDN Web Docs, and web.dev. No suspicious or obfuscated URLs were detected.
Audit Metadata