lens-studio-2d-ui

Pass

Audited by Gen Agent Trust Hub on Mar 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and code snippets for Lens Studio's ScreenTransform, ScreenImage, and Text components. No malicious patterns or security risks were identified.
  • [SAFE]: The skill explicitly addresses security and stability by providing a safeSetText function. This function demonstrates best practices for handling untrusted data by stripping HTML-style tags using a regular expression and capping string length before assignment to UI components, which prevents potential renderer crashes.
  • [SAFE]: External dependencies are limited to SpectaclesInteractionKit.lspkg, which is a standard internal package format for the Lens Studio development environment.
  • [SAFE]: Indirect Prompt Injection risk (Category 8) is effectively mitigated in the provided examples through explicit sanitization logic and the limited capability of the target component (UI text rendering).
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 28, 2026, 04:21 PM