web-ui-chakra-ui
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Documentation includes standard CLI commands for the library's ecosystem. Evidence:
npx @chakra-ui/cli snippet add(examples/core.md) andnpx @chakra-ui/codemod upgrade(reference.md). - [EXTERNAL_DOWNLOADS]: Fetches official library packages and CLI tools from the npm registry. Evidence: Mentions of
@chakra-ui/reactand@chakra-ui/clithroughout the skill files. - [INDIRECT_PROMPT_INJECTION]: The skill defines UI components that act as data ingestion surfaces for application users. Ingestion points:
Input,Textarea(examples/core.md),Dialog.Body(examples/composable-components.md). Boundary markers: None present in the UI snippets. Capability inventory: Pattern-based React code generation. Sanitization: Documentation explicitly defers form state and logic handling to the consuming application.
Audit Metadata