cocos-ui-schema-generator

Pass

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a PowerShell script (scripts/install-runtime.ps1) used for project initialization. The documentation recommends the -ExecutionPolicy Bypass parameter to run the script, which is a common pattern for local development tasks.
  • [PROMPT_INJECTION]: The skill processes user-provided UI designs or descriptions to generate TypeScript code. Ingestion points: Mockups, HTML, and text descriptions (SKILL.md). Capability inventory: Script execution for setup and file generation. Sanitization: The skill defines rigid rules for allowed node types and style keys, limiting the generation to a safe subset of the Cocos runtime.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 7, 2026, 03:34 PM