app-ui-mockups
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the GSAP animation library from a well-known CDN (JSDelivr) to power UI transitions.
- [EXTERNAL_DOWNLOADS]: References the HyperFrames registry for modular UI components, hosted on a known technology provider's public repository.
- [REMOTE_CODE_EXECUTION]: Utilizes the
npxcommand to run the HyperFrames rendering engine locally. This is the primary function of the skill, used to generate video output from HTML templates as described in the documentation. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-defined strings for UI mockups, such as terminal commands and chat messages. The implementation leverages
.textContentto handle this data, which mitigates the risk of executing embedded scripts or HTML during the rendering process. - [SAFE]: The documentation includes mandatory safety gates and rules that instruct the agent to redact API keys, hostnames, and secrets, and to use invented names to prevent the creation of deceptive content or the exposure of real data.
Audit Metadata