hyva-ui-component

Warn

Audited by Runlayer on Feb 23, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
4
Flagged
4
Chunks
5
Flagged Files (4)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: hyva-ui-component description: Apply Hyva UI template-based components to a Hyvä theme. This skill should be used when the user wants to add, install, or apply a Hyva UI component (such as header, footer, gallery, menu, minicart, etc.) to their Hyvä theme.

references/components.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/components.md [1/2] Description: # Hyva UI Components Catalog This catalog is auto-generated by scanning the installed `vendor/hyva-themes/hyva-ui` package. To refresh after updating hyva-ui, run: `scripts/refresh_catalog.sh` ## Non-CMS Components (Template-Based) These components require copying template files to the theme directory.

Tool: references/components.md [2/2] Description: slider - **A-basic**: Our implementation of a classic Carousel Slider, powered by our new Snap Slider for a super light CSS powered CSS slider.

scripts/parse_readme_xml.phpHIGH
78.3%

Malicious tool definition detected

Tool: scripts/parse_readme_xml.php Description: #!/usr/bin/env php <?php /** * Parse XML configuration block from a Hyva UI component README.

scripts/refresh_catalog.shHIGH
78.3%

Malicious tool definition detected

Tool: scripts/refresh_catalog.sh Description: #!/bin/bash # # Refresh the Hyva UI component catalog by scanning the installed hyva-ui package # # Usage: refresh_catalog.sh [hyva_ui_path] [output_file] # hyva_ui_path: Path to hyva-ui directory (default: vendor/hyva-themes/hyva-ui) # output_file: Output markdown file (default: prints to stdout) # # Example: # ./refresh_catalog.sh # ./refresh_catalog.sh vendor/hyva-themes/hyva-ui components.md # HYVA_UI_PATH="${1:-vendor/hyva-themes/hyva-ui

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
4
Files Flagged
4
Chunks Analyzed
5
Analyzed
Feb 23, 2026, 06:51 AM
Security Audit — runlayer — hyva-ui-component