anysystem-design
Pass
Audited by Gen Agent Trust Hub on Feb 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE] (SAFE): No malicious patterns detected. The skill is primarily composed of documentation, examples, and source code for a React UI library.
- [Indirect Prompt Injection] (LOW): The library contains components like
DataTable,NavList, andFormControlthat ingest and process external data. While these represent a surface for indirect prompt injection if the data provided to the components contains malicious instructions, the library lacks dangerous capabilities (such asexec,eval, or system-level access) that could be exploited. React's default escaping provides protection against traditional injection attacks. - Ingestion points:
DataTable(data prop),NavList(list prop),FormControl(value/options props). - Boundary markers: Absent (Standard React component architecture).
- Capability inventory: Limited to standard browser-based UI rendering; no subprocess calls or sensitive file system access detected.
- Sanitization: Standard React auto-escaping for JSX content.
Audit Metadata