component-library
Pass
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a Python utility
scripts/generate-component.pydesigned to automate component scaffolding by creating directories and writing boilerplate files. - Evidence: The script takes a
nameargument and constructs file paths:component_file = output_dir / f"{templates['kebab_case']}.tsx". - Context: While this is the intended functionality, the script does not sanitize the input name, which theoretically permits path traversal sequences (e.g.,
../) that could result in files being written outside the intended directory. - [EXTERNAL_DOWNLOADS]: The skill references and recommends numerous third-party libraries for UI and testing.
- Evidence:
SKILL.mdand reference files list dependencies such as@radix-ui/react-dialog,framer-motion, and@tanstack/react-table. - Context: These are widely used, reputable packages from the official NPM registry and are consistent with the skill's purpose.
Audit Metadata