bear-ui-skills
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [Prompt Injection] (SAFE): No instructions were found that attempt to override agent behavior, bypass safety filters, or extract system prompts. The use of 'MUST', 'SHOULD', and 'NEVER' is restricted to UI design constraints.
- [Data Exposure & Exfiltration] (SAFE): There are no commands or scripts that access sensitive local files or credentials. No network operations (curl, wget, fetch) are present.
- [Remote Code Execution] (SAFE): The skill contains no code or scripts. There are no package installation commands or remote script execution patterns.
- [Obfuscation] (SAFE): All text is provided in clear markdown. No Base64, zero-width characters, or hex-encoded strings were detected.
- [Metadata Poisoning] (SAFE): Metadata fields (name, description, author) accurately reflect the content of the skill and do not contain deceptive instructions.
Audit Metadata