pick-ui-library
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill acts as an opinionated lookup table for high-quality, accessible React and CSS libraries. All external links point to official documentation sites or established GitHub repositories of known developers and organizations in the frontend ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied task descriptions to provide library recommendations. While this creates a data ingestion surface, the risk is negligible as the skill only provides information on industry-standard packages and does not utilize high-privilege system tools.
- Ingestion points: User task descriptions provided in the prompt (e.g., "I need toasts").
- Boundary markers: None present in the instructions.
- Capability inventory: Library recommendation and project configuration suggestions (inspecting
package.json). - Sanitization: Not applicable as the skill primarily outputs informational recommendations.
Audit Metadata