use-coral-components
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists primarily of markdown documentation and JSX code examples for a React UI library. No security issues were identified during the analysis of the 98 files.
- [PROMPT_INJECTION]: No prompt injection patterns were found. The skill instructions are focused on guiding the agent to use local documentation rather than overriding safety filters or core behaviors.
- [DATA_EXFILTRATION]: The skill does not access sensitive local files or perform unauthorized network requests. URLs in the documentation point to legitimate vendor domains (sea.com, insea.io).
- [COMMAND_EXECUTION]: A maintenance script (
scripts/sync_coral_docs.py) is provided to help developers update the mirrored documentation. This script uses standard Python libraries for local file manipulation within the skill's own directory and does not execute arbitrary system commands or access untrusted data. - [EXTERNAL_DOWNLOADS]: Documentation instructs the developer on how to install the library from a private npm registry (
https://npm.sea.com/), which is a standard procedure for internal or proprietary tools.
Audit Metadata