Skills
Navigate
skills/videojs/skills/videojs-ui/Gen Agent Trust Hub

videojs-ui

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Recommends the installation of companion skills from various external repositories.
  • Evidence: Refers to skills from multiple authors and organizations in references/companions.md.
  • [REMOTE_CODE_EXECUTION]: Provides instructions to execute shell commands that download and add external skills to the agent's environment.
  • Evidence: npx skills add commands targeting third-party GitHub repositories in references/companions.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external design specifications and reference materials, creating a vulnerability surface.
  • Ingestion points: External design specs, reference URLs, and icon crops in design/reference/icons/ (referenced in SKILL.md, references/icons.md, and references/review.md).
  • Boundary markers: Absent. No instructions are provided to delimit external data or ignore instructions within it.
  • Capability inventory: Shell execution via npx skills add (references/companions.md) and file system writes to design/reference/icons/ (references/icons.md).
  • Sanitization: Absent. No mention of content sanitization or validation before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 11:04 AM