aura-theme
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill provides structured guidance for interpreting user design requests and mapping them to predefined Aura theme properties. No patterns indicating attempts to override agent instructions or bypass safety guardrails were detected.
- [EXTERNAL_DOWNLOADS]: The skill includes
@importstatements for fonts hosted on Google Fonts (fonts.googleapis.com). This is a well-known technology service, and the use of these URLs is documented neutrally. No other external resources or scripts are downloaded. - [COMMAND_EXECUTION]: File system operations are limited to locating styles.css (typically in /src/main/resources/META-INF/resources/) and creating/modifying CSS files. These are standard development tasks for the skill's stated purpose and do not involve executing shell commands.
- [DATA_EXFILTRATION]: The skill does not access sensitive system files, environment variables, or credentials. There are no network operations that could exfiltrate data.
- [REMOTE_CODE_EXECUTION]: The output is restricted to declarative CSS. The skill does not facilitate the execution of remote code, script piping, or dynamic runtime execution.
Audit Metadata